Privacy Policy

1. Information we collect

Account information

When you create an account, we collect your email address, public display name, optional profile photo, account identifiers, and account timestamps. Profile photos are public and should not include children or sensitive personal information. Authentication is handled by Supabase. PinStops does not receive or store your password in readable form.

Contributions and reports

If you add or update a PinStop, we collect the place name, category, address, map coordinates, changing-station location, status, notes, and submission time. We internally associate contributions with your account to prevent abuse and support moderation. Approved place information and your public display name may appear publicly.

Optional device location

If you choose “Share my location,” your browser provides coordinates so the map can move near you. The PinStops application does not save those coordinates to your account or database. You can deny or revoke location access through your browser or device settings.

Technical information

Our infrastructure providers may automatically process IP address, browser and device information, request timestamps, security signals, and error or delivery logs when you use PinStops. Authentication information is stored in your browser so you can remain signed in.

2. How we use information

• Provide and maintain the PinStops map and accounts.
• Verify email addresses and send account or security messages.
• Review, publish, correct, and moderate community contributions.
• Prevent spam, fraud, misuse, and security incidents.
• Respond to support requests and enforce our Terms.
• Comply with applicable legal obligations.

3. How information is disclosed

We disclose information only as needed to operate the service, protect PinStops and its users, comply with law, or complete a business transaction. Current service providers include:

• Cloudflare for website hosting, networking, and security.
• Supabase for authentication and database services.
• Resend for account and verification email delivery.
• OpenFreeMap and related map infrastructure for map imagery.
• OpenStreetMap Nominatim for address search and geocoding.

Approved place details, station reports, and community attribution may be publicly visible. We do not sell personal information or share it for cross-context behavioral advertising.

4. Retention

We retain account information while your account is active and as reasonably needed to operate the service, maintain map integrity, resolve disputes, prevent abuse, and meet legal obligations. Public contributions may remain after account deletion where needed to preserve the usefulness and integrity of the community map, but we can remove or de-identify account associations when appropriate.

5. Your choices and privacy rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal information, or to object to certain uses. You may also sign out, change browser location permissions, and clear saved authentication data through your browser.

To make a privacy request, email [email protected]. We may need to verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right.

6. California privacy information

During the preceding 12 months, PinStops may have collected identifiers, internet or electronic activity, approximate or user-authorized geolocation, and content you submit. These categories come from you, your browser or device, and our service providers, and are used for the purposes described above.

We may disclose these categories to infrastructure providers for business purposes. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. California residents may request to know, correct, or delete covered information by contacting us at the address below, subject to applicable exceptions.

7. Security

We use administrative and technical safeguards designed to protect information, including encrypted connections, access controls, database row-level security, rate limits, and email verification. No online service can guarantee absolute security, so use a unique password and contact us if you believe your account has been compromised.

8. Children

PinStops is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and remove it as appropriate.

9. Changes to this policy

We may update this policy as PinStops changes. We will post the revised version here and update the effective date. If a change materially affects how we use personal information, we will provide additional notice when appropriate.

10. Contact

For privacy questions or requests, contact Vsentra at [email protected].