Privacy notice
What data the website, the editor and Team Create handle, and why.
We collect as little as possible. This notice explains what's handled, why, and what your rights are.
Contact: WAYLINE_CONTACT
The website
- No cookies, no analytics, no trackers. The site doesn't set cookies, and it loads no third-party scripts, fonts or embeds. Everything comes from our own domain.
- Hosting. The site and the download are served by Cloudflare (Cloudflare Pages and R2). To deliver and protect the site, Cloudflare processes standard request data such as your IP address, browser type and the pages or files you request. It may keep this in short-term logs and use it for security. We don't use this data to identify you.
- The search box runs entirely in your browser. What you type isn't sent anywhere.
The editor
The editor works on your own computer. It doesn't send your maps or projects anywhere, except in these cases:
- Satellite pictures, terrain heights and map data. When you use these features, the editor requests tiles and data directly from the service you choose, such as Esri, OpenStreetMap, AWS Terrain Tiles, Ordnance Survey, Mapbox or MapTiler. That service sees your IP address and the area you request, under its own privacy policy. Any keys you enter are stored only on your computer.
- Bug reports. Help → Report a bug… prepares a report on your computer and opens it in your browser. Nothing is sent until you submit it yourself. Paths inside your user folder and imagery keys are removed from the attached log.
- Update check. When it starts, the editor may contact GitHub to check for a newer release. GitHub sees your IP address.
Team Create
If you create a Team Create account, the service stores:
| Data | Why |
|---|---|
| Username | So other members can see who you are in a project |
| Email address | To identify your account, and so email verification and password reset can be added later without you making a new account |
| Password hash | To check your password when you log in. Your password itself is never stored, only a salted PBKDF2-SHA256 hash |
| Login tokens (hashed) | To keep you logged in for up to 30 days |
| Projects, membership and bans | So you can create, join and manage team projects |
| Map files you upload | To share them with your project's members and keep snapshots |
| Timestamps | When accounts, projects and memberships were created and changed |
- While you're connected, other members of the same project can see your name, your pointer, your selections and what you're doing in the editor.
- Where it's stored. Team Create runs on Cloudflare (Workers, Durable Objects, D1 and R2). Cloudflare may process data in data centres outside the UK, under its own data protection commitments.
- How long it's kept. Account data is kept until you ask us to delete it, or until Team Create's testing phase ends and the data is cleared. For each project, the last 12 snapshots are kept. Pack files passed between members are deleted once fetched, and any leftovers are cleared after a day. Deleting a project removes it for everyone.
- Lawful basis. We use this data to provide the service you've signed up for, and in our legitimate interest in keeping it secure.
We don't sell your data, and we don't use it for advertising.
Your rights
Depending on where you live, you may have the right to access, correct or delete your data, to object to or restrict how it's used, and to get a copy of it. To use these rights, contact us at WAYLINE_CONTACT. If you're in the UK, you can also complain to the Information Commissioner's Office (ico.org.uk).
Changes
If this notice changes, we'll update the date at the top of the page.