Privacy Policy
This describes what Mapomancy collects, why, and what you can do about it. We're a small team and we've tried to keep this short and honest rather than long and defensive.
Who's responsible for your data
The controller is Grimoire Interactive LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, USA, contactable at privacy@mapomancy.com.
What we collect
| Data | Why we have it |
|---|---|
| Email address, password hash | Your account. We never store your password itself, only a salted hash. |
| Maps and uploaded images | The thing you're here to make. Stored so you can sync across devices and come back to them. |
| IP address, in short-lived rate-limit records | Abuse prevention (signup and login throttling). Kept no more than 24 hours. |
| Request logs (your account id and the path you hit, not the content) | Debugging and security. Kept in a rolling, size-capped buffer on the server — typically a matter of days, never more than 50 MB per service. |
| Error reports (account id, browser and GPU info, stack traces) | So we can fix crashes. Sent to Sentry (see "Who else sees this" below). Never includes your email, password or any link token. |
| Aggregated, pseudonymised analytics (page views, first-map/first-export milestones) | So we know the product works, without profiling anyone. See "Analytics" below. |
Why we process it (lawful basis)
- Running your account, storing your maps and syncing them: **performance of
a contract** with you.
- Rate-limiting, error reporting, abuse prevention: legitimate interest
in keeping the service secure and working.
- Aggregated analytics: legitimate interest in understanding product
usage — see the assessment in `docs/legal.md` for the full reasoning.
- Marketing email, if we ever send any: consent, opt-in only. We don't
send marketing email today.
Analytics
We run a self-hosted, cookieless analytics tool (Umami). It does not set any cookie in your browser. It records pseudonymised analytics data — a daily-rotating hash derived from your IP address and browser, never stored on your device — processed under legitimate interest (Art. 6(1)(f)) for audience measurement. There's no cross-site tracking and no profiling, and we honor Do Not Track.
Cookies
We use exactly one cookie: a strictly-necessary session cookie that keeps you signed in. It isn't used for tracking or advertising, so it doesn't require a consent banner under EU/UK law, and we don't show one.
Who else sees this (processors)
| Processor | What for | Where | Transfer basis |
|---|---|---|---|
| DigitalOcean | Hosting, database, file storage | United States | Standard Contractual Clauses (TODO(owner): verify DigitalOcean's current SCC/DPF documentation — UNVERIFIED at time of writing) |
| Zoho ZeptoMail | Transactional email (verification, password reset, receipts) | TODO(owner): verify region and transfer mechanism — UNVERIFIED | |
| Sentry | Error/crash reporting | EU (our Sentry project is provisioned in the EU region) | Processed within the EU; no US transfer for this data |
| Discord | Sign-in, only if you choose to use "Sign in with Discord" | TODO(owner): verify transfer mechanism — UNVERIFIED | — |
| Stripe (Managed Payments) | Billing, as merchant of record | Independent controller for payment data — see Stripe's own privacy policy | Stripe's own documented safeguards |
We don't sell your data, and we don't share it with anyone not on this list.
How long we keep things
Your account data lives as long as your account does. If you delete your account, your data is removed immediately from the live database; it can persist in encrypted nightly database backups for up to 35 days before those backups age out and are deleted.
Your rights
You can, at any time:
- Export everything. Download every map you own as a `.mapomancy`
project file — an open format you can reopen in any Mapomancy account, or hand to anyone who wants to inspect what we hold.
- Delete your account. Settings → delete account. This is offered as
part of the same flow as the export above, so you never have to choose one or the other.
- Ask us directly. Email privacy@mapomancy.com for access, correction or
any other request under GDPR/UK GDPR or a US state privacy law.
If you're in the EU or UK and think we've mishandled your data, you can complain to your local data protection authority (in the UK, the ICO) as well as to us.
International representatives (Art. 27 GDPR / UK GDPR)
TODO(owner): see the "Art. 27" section of `docs/legal.md` for the current decision (deferred, with the risk accepted; export and deletion on request are honored regardless) and the review trigger for appointing a representative.
Children
Mapomancy isn't directed at children. You must be at least 16, or the age of digital consent where you live if higher, to create an account.
Changes to this policy
If we materially change this policy, we'll email the address on your account at least 14 days before the change takes effect.
Changes
- 2026-08-21 — Initial publication.