There is almost nothing to tell you.

We store what you typed: your company name, the link, your one line of text, your logo (or the address we fetched it from), and your email. All of it except the email is public — that is what you paid for.

Your email is never shown on the site and never sold. We use it to send your receipt and to tell you if somebody outbids you. Those are the only two emails this site sends. It is also what identifies you, because there are no accounts.

Stripe processes the payment and keeps the card details. We never see them. We keep the payment reference so we can refund you.

Nothing identifies you. When a sign is drawn on your screen for a full second, we add one to that building’s view count. When you follow a link, we add one to its clicks.

To keep one person reloading a page from inflating those numbers, we need to recognise a repeat within the hour. We do that by taking your IP address and browser string, mixing them with a secret only we hold, and running the result through a one-way hash. The 22 characters that come out are all we keep. Your IP address is never written down anywhere. The hash cannot be turned back into it, cannot be matched against any other site, and is useless to anybody who steals it.

We count them, through Vercel Analytics. It records that a page was opened, which page, and roughly where in the world from — no cookies, no identifier that follows you, and nothing that can be tied back to a person. It cannot see you on any other site, because it does not exist on any other site you visit.

What it is for: knowing whether anybody is arriving at all, and from where. Nothing on this site is priced or sold on the strength of it.

None. Not one, not even a “necessary” one — which is why this site has never shown you a consent banner, and why the paragraph above can be true at the same time as this one.

Your browser does keep a single flag, stored on your own machine, so the welcome panel does not open every time you visit. It never leaves your device and we cannot read it.

Four companies, each doing one job:

Stripe takes the payment. Resend delivers the email. Supabase stores the database. Vercel runs the site and counts the page views described above. Nobody else. No data broker, no advertising network, no “partners”, and nothing about you is ever sold.

When you claim a building we fetch your website once, from our server, to read your logo and colours. That is a normal visit to a public page and we send nothing personal with it.

Claims and their history stay for as long as the map does — the record of who held which building is the point of the place. View and click counts older than 30 days stop counting toward anything.

Ask us to delete your email and we will, on the same day. That ends your ability to recover the claim, because the email is the only thing tying you to it.

Write to us and you can have a copy of everything we hold about you, have it corrected, or have it deleted. No form, no account, no verification hoops — just an email from the address you paid with. We answer within a few days.