Privacy
What this site stores about you, why, and for how long.
- Your account
- The sign-in provider (GitHub or Google), its user id for you and your display name there, whether an administrator approved or blocked the account or lifted its limits, when it was made and when you last signed in. No e-mail address, no password. Why: to sign you in and to give you your searches. Kept as long as the account exists.
- Sessions
- A random token in a cookie (__Host-findaline); the site stores only its SHA-256 hash, with a token against cross-site requests and when it was made and last used. A session ends when you sign out, after 30 days, or after 7 days without a visit, and is then deleted. Signing in uses a second, signed cookie for at most 10 minutes.
- Searches
- What you search (the place, the drawn or loaded area, the options), its title and status, and its messages and progress. Why: to run the search and show it to you. The messages are deleted after 90 days after the search ended; the search itself stays in your queue.
- Runs
- The results of your searches (lines, maps, parameters, the place's name from OpenStreetMap) and their size. Kept until you delete them in Runs. A share link is stored as a SHA-256 hash only; it can be renewed or revoked.
- Favourite lines
- The lines you mark as favourites on a map: the run, the line's anchors and its values (length, clearances, heights, angles, prominence), and when you marked it; at most 10000. Why: to list them for you. Kept until you unmark them or the run is deleted.
- Quotas
- How many km² your searches covered and how many uncached Nominatim requests they made, with the time; deleted after 2 days. Request rates are counted in memory only.
- Audit log
- Sign-ins and sign-ups, approvals and blocks, searches started and cancelled, share links made, renewed and revoked, deleted runs, the demo flag, favourite lines marked and unmarked, other administrators' actions and refusals by a limit: the time, the action, the user id and what it concerned. Why: to find abuse and mistakes. Deleted after 90 days.
- IP addresses
- The application stores none. The reverse proxy in front of it may log requests with their addresses to protect the site (its operator's configuration); sign-in requests are counted per address in memory only.
- Administrators can see every search and open every run, also private ones (to run the site and to help).
- A demo run, marked by an administrator, is open to everyone. The cached orthophoto tiles (copies of public services' images, no user data) are open to everyone.
- Searches ask public services from the server: Nominatim and Overpass (OpenStreetMap) and the services of the elevation data, with the places of the search, not who you are. Maps in your browser load background tiles (OpenStreetMap, OpenTopoMap, Esri, orthophoto services) directly: those services see your IP address.
- No analytics, no advertising, no tracking cookies.
Questions, or to have your account and data deleted: krzysiek@lukawski.org.