Privacy policy

Local files are read and parsed in the browser. The original file is not uploaded for parsing. Importing from a URL makes a browser request to the host of that file, which can see the request.

Unsaved studio changes are held in the current tab’s memory. They are not automatically restored after a refresh or after closing the tab. Export your work before leaving.

Both “Save without publishing” and “Publish and get a link” upload the map document. This includes its title, geometry, feature properties, layer styles, chart settings and map view. Saved project metadata and documents are stored using Cloudflare services.

An unpublished saved map requires its editing credentials to load. Anonymous maps use an edit token kept in this browser’s local storage, which also lets the last saved map reopen when you return to the studio. Clearing that storage can remove your access. Public maps are not password-protected.

• An account stores your email address, display name, password hash and creation time. The password itself is not stored.
• Signing in creates a session record and an HttpOnly session cookie with a 30-day expiry. Signing out clears that session.
• Saved projects can be associated with your account. When you sign in with Google or X, we receive your name, provider account identifier, profile photo and email if the provider supplies them. We store the identifier to connect your account and the photo URL to display your avatar. Your browser loads that photo from the provider. Provider access tokens are used only to complete sign-in and are not stored.

You can import, style, export, save and publish without creating an account.

The current editor is free. If paid plans are enabled, checkout and billing management are hosted by Waffo or Dodo Payments. We send your account ID, email and order details to the selected provider. Payment card details are handled by the provider and are not stored by MapCrafter.

We store order and payment identifiers, price, currency, subscription status, billing periods and refunds to display your billing history and prevent duplicate processing. Verified notification identifiers and body hashes support reconciliation. Each payment provider also applies its own privacy policy.

Address rows are retained on import. When you start geocoding, address text is sent for lookup. The built-in service sends queries through our server to Nominatim and caches successful lookup results for up to 30 days.

If you enter a MapTiler or Mapbox key, lookup requests go directly from your browser to that provider. Its own account terms and privacy policy apply. Use coordinate columns to avoid address lookups.

Cloudflare hosts the application and handles requests to it. OpenFreeMap serves basemap tiles and related resources. These providers receive connection information such as your IP address; map-resource requests also reveal the area being viewed.

The current application does not include advertising pixels or third-party analytics scripts. The session cookie is used for sign-in, a ten-minute OAuth cookie protects Google and X authorization, and local storage keeps anonymous project editing credentials. Saving and publishing transmit map data as described above.

Saved maps and account records remain on the server; the current interface has no self-service account or project deletion control. For a copy, correction or deletion of your data, contact contact@mapcrafter.app. Include enough information to identify the account or map, but do not send your password or edit token by email.

Clearing browser storage removes local editing credentials, not the server copy or a published link. Contact us if a published map needs to be removed.

You may request access, correction or deletion of personal data, or object to processing, subject to applicable law. Contact contact@mapcrafter.app for privacy requests or information about the service operator.

The date on this page indicates its latest revision. See also the terms of service.