Privacy

Core privacy principle

Places, collections, photos, and notes in MyMapLog are private by default. Other people can access them only when the owner explicitly creates an active share link.

Data stored by MyMapLog

To provide the service, MyMapLog may store:

• account and profile data, including email, username, and settings;
• saved places, coordinates, visit dates, place types, and overnight-stay markers;
• notes, collections, and relationships between places and collections;
• uploaded photos and technical metadata required to store and display them;
• invitation request data: name, email, and message;
• technical data required for authentication, security, rate limiting, and session operation.

Photos

Uploaded images are stored outside the site's public directory. MyMapLog does not publish the original uploaded files directly. Images are processed and stored as WebP; original EXIF metadata is not served as part of the source file.

Sharing

An individual place or collection can be opened to other people only through an explicitly created share link. For a collection, the owner controls access to individual places inside it.

A disabled, replaced, or deleted share link no longer provides access. Simply belonging to a collection does not make a place public.

Cookies and technical data

MyMapLog uses essential cookies and session data for account sign-in, security, interface language preferences, and proper service operation.

The server may temporarily retain request logs, IP addresses, and other technical information required for security, error diagnosis, and abuse prevention.

Maps and external services

To display maps, MyMapLog may load map data from OpenStreetMap, OpenTopoMap, and Esri. These services receive the technical requests needed to render the map.

For place search, MyMapLog uses Nominatim, which is based on OpenStreetMap. When you search, the text you enter and the selected interface language may be sent to this service.

When building a road route for a shared collection, coordinates of places allowed to be shown may be sent to an external OSRM-compatible routing service.

MyMapLog hosting and email infrastructure are provided by INTROServ.

Analytics

MyMapLog currently does not use optional web analytics and does not load Google Analytics.

If analytics is enabled in the future, it will be introduced separately with appropriate consent handling and without sending share-link secrets to analytics services.

Invitation requests

When you submit an invitation request, MyMapLog receives the name, email address, and message you provide. This data is used to review the request, contact you, send an invitation if approved, and protect the form from abuse.

Submitting a request does not create an account and does not guarantee access. Pending and rejected requests may be retained for up to 12 months.

Data deletion

When an account is permanently deleted, its data is removed from the live MyMapLog database and active storage, including places, collections, share links, and photos.

Deleted data may remain in backup copies for up to 7 additional days, after which it disappears when the next full backup is created.

You can delete your account and the data associated with it yourself in the Profile section. After you confirm deletion, the account and data cannot be restored from the active system.

Your data and advertising

MyMapLog does not sell users' personal data or provide the contents of private places, collections, notes, or photos to third parties for advertising.

Contact

For privacy questions or requests to correct or delete data, contact: info@mymaplog.com

Policy updates

This policy may be updated as MyMapLog evolves, service features change, or external providers are changed.

Last updated: September 5, 2026.