Privacy Policy

Cartomoir is a travel-mapping service built and hosted in Canada. Travel history is location data, and location data is sensitive. This policy explains what we collect, why, and what control you have over it. We collect only what the service needs to work, we don't run advertising or sell data, and your entire account is yours to export or delete at any time.

What we collect

Account information

When you register we store your name, email address, username, and a hashed password. If you sign in with Google or GitHub instead, we receive your name, email address, and avatar from that provider and store the provider's account identifier so you can log in again; we never receive your password for those services and never post or act on your behalf there. A password is optional for social-login accounts.

Travel data

The flights, train journeys, trips, routes, and notes you add are the heart of your account. This is location history you enter yourself — we never track your device's location, and we never collect travel data you didn't explicitly add or import.

Payment information

Cartomoir Pro purchases are processed by Lemon Squeezy, our merchant of record. Your card details go directly to them and never touch our servers; we receive only what we need to activate your subscription, such as your email, order status, and subscription status.

Technical data

Like most web services, our servers keep standard request logs (IP address, browser type, pages requested) and application error reports. We use these to keep the service running and secure, not to profile you.

Cookies

We use only the essential cookies the application needs to function: a session cookie to keep you logged in and a CSRF token to protect forms. There are no advertising cookies, no cross-site trackers, and no third-party analytics scripts.

Who can see your map

Visibility is a setting you control. Free maps are public at cartomoir.com/u/yourusername. Pro accounts can make a map private or share it via an unlisted secret link. Anything you make public or share by link can be seen by anyone who has the address — including search engines for public maps — so choose the visibility that matches how you feel about your travel history being visible.

Services we rely on

Cartomoir uses a small number of third-party services to work. When your browser or our servers talk to them, they receive the technical data inherent in that request (such as your IP address):

• Lemon Squeezy — payment processing and billing for Pro.
• Google and GitHub — optional social sign-in.
• CARTO and OpenStreetMap — the basemap tiles your browser loads to draw the map.
• OSRM and Nominatim — route calculation and location search, proxied through our servers so these services don't see who you are.
• Bunny Fonts — web fonts served without user tracking.

We never sell your data, and we never share it with anyone for advertising or marketing purposes.

Where your data lives

Cartomoir is hosted in Canada and your account data is stored there. We handle personal information in accordance with Canadian privacy law (PIPEDA). If you're in the EU/EEA or UK, you have equivalent rights of access, correction, portability, and erasure — all of which you can exercise directly from your account, as described below.

Your data is yours

• Export: one click in your profile downloads your entire account in open formats (one GPX file per route plus a combined GeoJSON). Exports are never behind a paywall.
• Correction: you can edit or remove any flight, trip, or profile detail at any time.
• Deletion: deleting your account from your profile settings permanently removes your account and travel data from our systems. Residual copies in routine backups expire on their normal rotation.

Data retention

We keep your data for as long as you have an account. Server logs are kept only as long as needed for security and troubleshooting. Billing records are retained as required by tax and accounting law.

Children

Cartomoir is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has created an account, contact us and we'll remove it.

Changes to this policy

If we make material changes to this policy, we'll update this page and the date at the top, and for significant changes we'll notify you by email or an in-app notice before they take effect.

Contact

Questions about privacy or your data? Email us at hello@cartomoir.com.