Cartahaven Privacy Policy

What we collect

• Account data: email address, display name, password (stored hashed by our auth provider, Supabase).
• Purchases and downloads: which maps you bought or claimed, when, and download logs (time, IP address, browser user agent) used for fraud prevention and support.
• Payment data is handled by Stripe. We never see or store full card numbers.
• Publishers: organisation details and Stripe account identifiers.

What we do not collect

The store does not receive your GPS location. The map reader works offline and keeps your location on your device. The catalog's "use my location" search runs in your browser and only sends the coordinates you search with.

Sharing

Publishers see sales of their own maps (date, amount), not your email address. We share data with processors that run the service: Supabase (database, storage, auth), Stripe (payments), our hosting provider, and OpenStreetMap tile servers for map previews. We do not sell personal data.

Retention and your rights

[TO DECIDE: retention periods.] You can ask for access to, or deletion of, your data at support@cartahaven.com. Purchase records may be kept as required for tax and accounting.

Cookies

We use only the cookies needed to keep you signed in. No advertising trackers.