Maptelier is operated by WR Works, based in Malaysia, which is responsible for Maptelier’s handling of personal data. Contact contact@maptelier.com with privacy questions or requests.
Maps and imported files
The browser reads imported GPS files, tables and original photos on your device. We do not upload those original files as part of importing them.
A saved Map can contain coordinates, routes, dates, captions, notes and small photo thumbnails derived from those files. Hiding a location or photo in the layout does not remove it from the Map document.
While signed out, your saved Maps stay in that browser. Map tiles, search and route requests still reach the services described below.
Signing in uploads all Maps saved in that browser to your account. Cloudflare hosts the account records and saved Map documents. Changes sync while signed in so you can open your Maps in another browser.
If you approve a server export, we upload the full Map document to Cloudflare storage and give a Runpod worker temporary access to render it. This includes saved thumbnails and hidden data. The worker can be in any Runpod data centre, in whichever country has a machine free at the time. We also keep the Map title, requested format, job status and delivery email to provide the download.
Account, purchases and messages
For sign-in we use your email address, a temporary verification code or link, and a session record. We record basic account and Map information needed for saving and syncing. Request limits use your email address and IP address to help prevent abuse.
Lemon Squeezy collects payment and billing information in its checkout. We receive purchase records such as the order identifier, buyer email, Map identifier, payment status and any promotion or referral used. We use these to unlock Maps, restore purchases, handle refunds and administer offers. We do not receive your full card details.
Resend delivers sign-in, mailing-list and render messages. It receives the recipient address, email content and delivery information. A render email includes the Map title and private download link.
If you email us, we receive your address and the information you include. Our public email addresses forward through Cloudflare Email Routing to a Google Gmail inbox. Avoid sending original location histories or private files unless they are needed to resolve your request.
Mailing list and offers
Joining the mailing list is optional. The sign-in checkbox is unchecked by default. If you choose it, verifying your sign-in email also confirms that choice. Signing in without checking it does not subscribe you.
You can also join separately. Signed-in users can confirm that choice directly. Guests confirm their address through an email link. Members do not need to join again.
We keep the address, subscription status and records of joining or leaving. Use the leave link in a mailing-list message or email us to stop marketing messages. Leaving the list does not stop necessary sign-in, purchase or render messages.
Offer and referral records help us check eligibility, issue codes and prevent duplicate rewards. Browser storage may remember an offer code or a referral. The Cookies and browser storage notice describes those records.
Services your browser contacts
Your browser contacts these services when the corresponding feature is used. They receive network information such as your IP address, together with the request.
| Service | Information in the request |
|---|---|
| OpenFreeMap | Map tile areas, styles, fonts and related assets needed to draw the map and find nearby place names |
| Photon, hosted by komoot | Search text and the map centre used to find nearby results |
| OSRM and FOSSGIS routing services | Route waypoint coordinates and travel mode |
| AWS Terrain Tiles | Geographic tile areas needed to draw terrain |
| EOX IT Services | Imagery tile areas needed to draw a Map on the satellite base |
| Maptelier’s Cloudflare-hosted Overture place index | Country index files and portions of place data downloaded for search. Matching runs in the browser |
| Lemon Squeezy | Its checkout script, loaded when you choose to unlock a Map, and what you enter in the checkout that opens over the editor |
| Cloudflare Web Analytics | The page address, the referring page and how long the page took to load, to count page loads and measure speed. It sets no cookie |
Map, search and routing requests can reveal the area you are viewing, searching or routing. They do not require you to sign in. The services’ own privacy terms apply to their handling of requests.
Visit counts
We count visits, and the steps visitors take on the site and in the editor, to learn which pages and features work. Each count records the page, the step and how it went, the site or campaign tag that brought the visit, the type of device (phone, tablet or desktop) and the country Cloudflare works out from the connection. Steps include opening the editor, making a Map, downloading a format and opening the checkout. A purchase record also notes the page and source that led to it.
Counts carry no name, email address, IP address, browser identifier or Map content. Nothing is stored in your browser to recognise you later. The page you arrived on travels in the link to the next Maptelier page, and is removed from the address once read.
If the editor fails, it sends the error message and the place in our code where it happened. We use these reports to fix faults.
Why we use information
We use information to provide and save Maps, verify sign-in, deliver files, honour purchases, administer offers, answer requests, protect the service and learn which pages and features work. We also keep records when required by law or needed to resolve a dispute.
Where data-protection law requires a legal basis, we rely on providing the service or purchase you request, legal obligations, and legitimate interests in operating and securing the service where permitted. Optional marketing relies on your consent. For an activity that requires separate consent under applicable law, that consent must be obtained separately. This notice itself does not give us consent.
An email address is needed for sign-in, purchase delivery and mailing-list membership. Map content is needed for cloud saving or server rendering when you choose those features. You can use the local editor without joining the list or creating an account.
We do not sell your personal data or use private Maps to build advertising profiles. We do not use your private Maps to train AI models.
Sharing and international processing
We share information with the service providers described here to deliver their part of the service. We may also disclose information when legally required or reasonably needed to address fraud, security incidents or legal claims.
Cloudflare, Resend, Lemon Squeezy, Runpod and Google may process information outside your country. A render worker can run in any country where Runpod has a data centre. Storage, email, payment and provider records each have their own locations.
Where applicable law requires safeguards for an international transfer, those requirements apply to the transfer. Contact us for information about the destinations and protections relevant to your data.
The providers publish their own notices, including Cloudflare, Resend, Lemon Squeezy, Runpod, Google, OpenFreeMap and EOX.
How long information stays
| Information | Retention |
|---|---|
| Local Maps and browser preferences | Until you delete them or clear the browser’s data |
| Cloud-saved Maps | Until you delete the Map or account |
| Sign-in code or link | Valid for 15 minutes |
| Sign-in session | Up to 30 days. Signing out clears the current browser’s session |
| Server-render input Map | Removed after completion or failure. Interrupted jobs are subject to a two-hour input lifetime and periodic cleanup |
| Server files, private download access and render-job records | Seven days after the request was submitted, subject to cleanup processing |
| Purchase and unlock records | Kept to honour the purchase and handle refunds, disputes, fraud checks and applicable legal obligations |
| Mailing-list and offer records | Kept to record subscription choices, avoid unwanted mail and administer eligibility. Leaving the list retains a record of that choice |
| Visit counts | Three months, in Cloudflare Workers Analytics Engine. Totals we copy out carry no more detail than the counts |
| Error reports | Three days in our Cloudflare logs, and three months as counts |
| Support messages and operational records | Kept as needed to resolve requests, protect the service and meet applicable obligations |
Storage cleanup can take additional time. Expired download links stop providing access even when physical storage cleanup is still pending. Providers may keep their own security, delivery, transaction or legal records under their policies.
Deleting Maps and accounts
Deleting a cloud-saved Map removes its stored document. A deletion marker remains for account sync.
Deleting an account removes its cloud-saved Maps and account record. Maps in the browser remain as local copies. You can delete those copies or clear the browser’s data separately. Signing out instead uploads changes and then removes the account’s Maps from that browser.
Account deletion does not automatically erase purchase, mailing-list, offer, referral, support or server-render records. It does not cancel an existing render request. To request wider deletion or stop marketing, email contact@maptelier.com. We will explain any records we must retain and why.
Your choices and rights
You can use the local editor, choose whether to sign in, decide whether to send a Map for server rendering, and join or leave the mailing list separately.
Depending on the law that applies, you may have rights to access, correct, delete or obtain a copy of your personal data, restrict or object to processing, and withdraw consent. Withdrawing consent does not undo processing that was lawful before withdrawal. You may also complain to the relevant data-protection authority.
Send requests to contact@maptelier.com. We may ask for information reasonably needed to confirm ownership before sharing or changing records. We will handle requests within the time required by applicable law and explain any lawful restriction.
If a child has provided personal data without the necessary permission, a parent or guardian can contact us to request its removal.
Changes
We will update this notice when data handling changes. The date above identifies the version. We will give notice of material changes and request new consent where required.