Privacy policy

What we store, how long we keep it, and who else touches it. Short version: your account, your credits and your maps — nothing else.

Last updated: 25 July 2026

What we collect

You sign in with GitHub or Google. We never see your password for either — the provider tells us who you are, and that's the whole handshake.

Your account identity
Username, the provider you used and its account ID, and the email address on that account
Your credit balance and its history
What was granted, spent or purchased, so a balance can be explained if it looks wrong
The maps you generate
The area you selected, the settings you chose, and the generated files
Session and server logs
A login session cookie, plus ordinary request logs for debugging and abuse prevention

We do not collect card numbers, billing addresses, analytics profiles or advertising identifiers, and there are no third-party trackers on this site.

How we use it

To sign you in and find your account
Your identity is matched to your credits and your saved maps
To generate and deliver your maps
Your selected area and settings are what the engine runs on
To keep the service running and honest
Debugging, performance, and stopping abuse of a paid compute service
To reach you when something matters
Support replies, account recovery, security notices and service changes — never marketing email

How long we keep it

What Kept for Then
Generated map files 7 days Deleted from the server automatically
Your saved map settings Until you delete them One click regenerates the exact area and settings after the files expire
Account and credit history Until you ask us to delete it Removed with your account
Login session Until you log out or it expires Dropped from the session store

Downloading is free and unlimited during those 7 days. The files go, the recipe stays.

Who else sees it

We don't sell, rent or trade your personal information, and we don't sell, resell or list the maps you make. A short list of services does see part of it, because they do a job we'd otherwise have to do badly.

GitHub and Google
Sign-in only. They confirm who you are; we never receive your password.
Polar
Processes credit purchases and handles your payment details. We store only the resulting order reference, never a card number.
Hosting and monitoring providers
The infrastructure the service runs on, under confidentiality obligations
Legal requirements
When required by law, or to protect our rights or another user's safety

Your rights

You can ask us to do any of the following, and we aim to answer privacy requests within 48 hours.

Access and export

See what we hold about you, and get it in a portable format.

Correct

Fix anything inaccurate on your account.

Delete

Remove your account and everything attached to it. Saved maps can also be deleted one at a time from My Maps.

Withdraw or object

Withdraw consent, or object to how we process your data.

Security and cookies

HTTPS everywhere, OAuth for sign-in
Traffic is encrypted in transit and we hold no passwords to lose
Access controls and data minimisation
We keep the smallest set of fields the service needs to work
Essential cookies only
One session cookie to keep you logged in and remember your preferences. No advertising or analytics cookies.

Contact

Privacy requests

[email protected]

General support

The Discord, or @drkpxl.com on Bluesky

Changes to this policy

We'll update the date at the top of this page, and say so in-app if the change is significant.