Privacy policy
1. By default, everything stays on your device
Unless you turn on sync, PixieMap stores your maps (text boxes, photos, drawings, links, categories) and settings only in your browser's storage (IndexedDB) on the device you're using. In that case, nothing is sent to any server.
When you log in or link a device that already has its own content, PixieMap asks whether to add it to your account or use your account's content only. Nothing from this device is sent to the server before you choose. If you choose Use account only, the previous data on this device (photos included) is kept as a backup on this device only (the last 3 are kept) and is not sent to the server.
2. If you turn on sync
When you turn on sync in Settings, the following information is stored on a Supabase server (a project created by the operator, in the Tokyo, Japan region) so you can use the same maps on several devices. See section 3 for international transfers.
| Username and password | The username and password you choose (Supabase keeps the password only as a hash). Inside the server, the username is stored in the form username@users.synapse.invalid; this is not a real email address. |
|---|---|
| Device keys | An anonymous user identifier created for each linked device, the device name (typed by you or generated automatically, such as "iPhone Safari"), when it was linked, and when it was last seen |
| Map data | Categories, boxes (text, position, size), links, pen strokes, edit and delete times, and settings (such as colors) |
| Photos | Photos you add to boxes (JPEG, resized so the long side is 1200px) |
To prevent bots (automated sign-ups), PixieMap uses Cloudflare Turnstile (a human check) when you create a username, log in, or link a device. In this process, Cloudflare processes your IP address and browser information (section 3).
3. International transfers of personal information
Personal information is transferred abroad as described below only if you turn on sync.
| Recipient | Supabase, Inc. Privacy contact: privacy@supabase.com (Supabase's official privacy contact) |
|---|---|
| Country | Japan (Supabase Tokyo region, ap-northeast-1) |
| Items transferred | Username, map data (categories, boxes, links, pen strokes, settings), attached photos, device names |
| When and how | Each time something changes after sync is turned on, over an encrypted connection (HTTPS) |
| Purpose | Syncing between devices |
| Retention | Until you delete your account. Deleting the account removes the data from the server immediately. |
| How to refuse, and the effect | If you don't turn on sync, no international transfer happens and all data stays on your device. Every feature of the app still works without sync; only keeping devices in step is unavailable. |
To prevent bots (human check), PixieMap uses Cloudflare Turnstile as described below.
| Recipient | Cloudflare, Inc. Privacy contact: privacyquestions@cloudflare.com |
|---|---|
| Country | The United States and other countries where Cloudflare operates |
| Items transferred | IP address, browser and device information (for the human check) |
| When and how | When the human check runs on the create-username, log-in or link-device screens, over an encrypted connection (HTTPS) |
| Purpose | Preventing bots, such as automated sign-ups and brute-force logins |
| Retention | As set out in Cloudflare's privacy policy |
| How to refuse, and the effect | If you don't turn on sync, no human check takes place. In that case, sync can't be used. |
4. Information we don't collect
- We don't ask for email addresses, phone numbers, names or any other personal information.
- We don't use advertising or analytics tools, or tracking cookies.
5. Who can access the data
Server data is protected by row-level security (RLS), so only the keys linked to the same vault (your username and the devices you linked) can read and write it. Photo storage is private.
6. Retention and deletion
- Records of deleted items (markers used to keep deletions in step across devices) are cleaned up after 30 days.
- Backups kept on this device when you chose "Use account only" are deleted automatically after 30 days. Before then, you can add them to your account under Settings → Sync → Restore previous data. They are also deleted if you choose to erase this device's data when logging out.
- Settings → Sync → Log out: that device's key is deleted and it can no longer access the server. You can choose whether to keep or erase this device's data. Unlinking a device from another device's list has the same effect.
- Settings → Sync → Delete account: the vault, the map data and photos on the server, and the username and device keys are all deleted. Data on each device stays, and you can delete it in the browser (clear site data).
7. Contact
Privacy questions: Add the operator's contact details here