Privacy Policy

1. What we collect

• Photos you upload. We read the embedded EXIF metadata, including GPS coordinates and the date taken, to place each photo on the map. The full-size originals are stored so we can render the preview and the print-resolution file.
• Route files (GPX). Track points, timestamps and waypoints are used to draw the route and, if you enable them, day-number markers.
• Map settings. Titles, subtitles, trip moments, colours, a Spotify playlist link and an optional playlist screenshot, if you add them.
• Email address, optional. Collected by Stripe at checkout, or typed by you on the download page, so we can send your download link. We do not require it to use the service.
• Payment confirmation. Stripe tells us that a payment succeeded and gives us a session reference. Card numbers never touch our servers.
• Basic technical logs. Our hosting providers record IP addresses and request details for security and debugging, as is standard for any website.

2. What we use it for

• Rendering your preview and print file, and showing your interactive share page.
• Delivering your download link and answering support requests.
• Featuring your map publicly, only if you chose the free showcase option.
• Keeping the service secure and fixing bugs.

We do not sell your data, run advertising trackers, or use your photos to train models. If you gave us an email address we may occasionally write to you about PicsOnAMap itself. Every such email will include a way to opt out.

3. Who can see your map

Your preview, edit and download pages use a long random link. Anyone with that link can view the page, so share it deliberately. The interactive share page works the same way and is also what the optional QR code on your poster points to. Nothing is listed publicly unless you opt in to the showcase.

4. Where it is stored and who processes it

• Railway hosts our rendering server and stores uploads, generated files and job records.
• Vercel hosts the website you are reading.
• Stripe processes payments and holds your card details under its own privacy policy.
• Resend delivers our transactional emails.
• OpenStreetMap tile servers supply base map imagery for the share page in your browser.

These providers act on our instructions and only receive what they need to perform their role.

5. How long we keep it

Uploads and rendered files are kept so that your preview, download and share links keep working. We periodically remove unpaid jobs that have been abandoned, and we may remove older paid jobs after giving you a reasonable chance to download. You can ask us to delete everything connected to a map at any time, see below.

6. Your rights and how to delete your data

Email hello@picsonamap.com with your map link or job ID and we will delete the photos, route, generated files and any email address attached to it, and remove the map from any showcase. We aim to complete deletion requests within 7 days. You can also ask what we hold about a map, or ask us to correct it.

If you are in the UK, EU or another region with specific privacy rights, those rights apply to how we handle your data and you may also complain to your local supervisory authority.

7. Children

PicsOnAMap is not directed at children under 16, and we do not knowingly collect their data.

8. Cookies

PicsOnAMap sets no cookies of its own and uses no tracking cookies. Stripe sets cookies on its hosted checkout page to prevent fraud and complete your payment.

9. Changes and contact

We will update this page if our practices change; the date at the top shows the current version. Questions: hello@picsonamap.com. See also our Terms of Service.