YOUR DESIGN, YOUR BROWSER
A clear view
of your privacy.
Updated 24 October 2026. There are no accounts, payments or ads. The site uses Cloudflare Web Analytics, described below, and no cookies of our own.
Artwork and local storage
Your design, captions and camera position are saved in localStorage
under map-art:design:v1. PNGs are composed in your
browser; the application does not upload artwork or captions. Reset
design removes the previous saved design and saves defaults. Clearing
this site’s browser data removes recovery data.
Share links
Share design puts the design, including location and captions, in a
#design= fragment. The fragment is not part of the HTTP
request to the server. Anyone with the complete link can read it. The
editor consumes and clears inbound design fragments from its address,
then saves the design locally. Old root share links hand off to
/create. We do not put full share links or captions in application
logs. Browser history, clipboard and people you share with may retain
links.
Map and font services
Opening the editor connects directly to OpenFreeMap for vector tiles, map glyphs and sprites. Tile requests reveal the area being viewed; the provider sees your IP address and normal network request data. Caption fonts are bundled locally, with no caption text sent to a font service. The landing page and these information pages do not load the map renderer or caption fonts. See OpenFreeMap privacy.
Name search
Submitted place searches are sent to our /api/search Worker and geocode.maps.co (limit 10 results), using a server-only key. Search happens when you submit, not on each keystroke. Results are requested in English, with local name variants when available. A global Durable Object spaces provider requests and keeps provider backoff; a minute-keyed HMAC of the Cloudflare connecting IP enforces short-lived per-client limits, expiring in 60 seconds. Query text is not stored in the gate. See the geocoder’s privacy policy.
Analytics
We use Cloudflare Web Analytics to count visits and see which pages and referring sites bring people here, plus page-load performance. Cloudflare adds a small script to pages for visitors outside the European Union; visitors in the EU do not receive it. Cloudflare states that Web Analytics does not use cookies or local storage and does not build profiles of individual visitors. It reports aggregate page views, referrers, countries, device and browser types and performance timings to us. It does not receive your designs, captions, searches or share-link fragments from our code. See Cloudflare Web Analytics.
Our own event collection: disabled
This build sends no browser event requests and has no Analytics Engine binding. The optional /api/events endpoint still rejects malformed or private fields. It only accepts six closed event names (editor start, map interaction, mode change, style change, export attempt and export result), closed mode/style/format/outcome enums and coarse duration buckets: under 5 seconds, 5–15 seconds, 15–60 seconds or over 60 seconds. No searches, coordinates, captions, identifiers, URLs or raw durations are accepted.
Activation requires separate verified configuration and an updated notice. Cloudflare Analytics Engine documents three-month retention, not enforceable 30-day deletion; it has not been enabled here. No application request logging or Worker observability is enabled. Cloudflare hosting and third-party services may process request metadata under their own policies; this page does not promise that infrastructure records are absent. See Cloudflare privacy.