Privacy policy

Who is responsible

The controller is [Nom et prénom, ou nom de l'entreprise], [Adresse postale]. Contact: hello@leylinemaps.com.

What we collect

Without an account: nothing. Your maps and preferences are stored in your browser (local storage) and are never sent to us.

With an account: your email address, the sign-in method (email link or Google), the dates your account was created and last used, your maps saved online, and, if you create share links, a public copy of the shared map and its preview image.

If you sign in with Google, we receive your email address from Google; we don't access your contacts, files or anything else.

Why

To provide the service you ask for: saving your maps online, syncing them across your devices, and showing shared maps to the people you send the link to (performance of the contract).

To keep the service secure and working (legitimate interest). We don't sell your data, don't show ads, and don't use your maps to train AI.

Shared maps are public to anyone with the link

When you create a share link, a copy of the map (without its secret items, unless you choose to include them) and a preview image become readable by anyone who has the link. Turn the link off at any time with “Stop sharing”: the copy and the image are removed.

Who processes the data

Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Database, sign-in and file storage: Supabase Inc. (base de données hébergée dans la région choisie pour le projet). Google, if you choose to sign in with Google.

Some of these providers are based in the United States. Transfers are covered by the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

As long as your account exists. When you delete your account, your maps, share links and preview images are deleted immediately; technical backups from our providers are erased within their usual retention period (usually a few weeks).

Cookies and local storage

Leyline only uses what is strictly necessary: a session cookie to keep you signed in, a cookie remembering your language, and local storage for your maps and settings. No advertising or tracking cookies, so there's no cookie banner.

Your rights

You can access, export, correct and delete your data. In the editor, open your account menu: “Export my data” downloads everything in a file, “Delete my account” removes it all. You can also write to us for any request, or to object or ask for restriction.

You can lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority of your country.

Age

Accounts are for people aged 13 and over.

Changes

If this policy changes in a meaningful way, we'll say so in the app before it applies.