Privacy policy

Last updated: 5 August 2026

This policy explains how MarkAndMap processes information when you use markandmap.com and its map pages.

MarkAndMap does not sell, rent or trade your personal information or saved-map data. Information is shared with service providers only when needed to operate requested features, provide secure account storage or—if you consent—measure website usage.

Who is responsible

MarkAndMap is the controller for personal data processed to operate this website. Privacy enquiries can be sent to markandmap@gmail.com.

Information we process

Accounts and saved maps

If you create an account, we process your email address, account identifiers, authentication and security information, account timestamps, and the maps you choose to save. Saved-map content can include coordinates, addresses, marker labels, map position, zoom level and display settings. Passwords are handled and hashed by Supabase; MarkAndMap does not store readable passwords.

Location and map requests

If you grant browser location permission, your coordinates can be cached in your browser for up to 60 days to start the map near you. When you request an address, nearby place, reverse-geocoding result, map tile or related map feature, coordinates, search terms or the visible map area may be sent to the provider needed to return that feature. MarkAndMap does not add browser-location coordinates to your cloud account unless you deliberately save them as part of a map.

Other interactive map pages

Equal Earth Viewer, Equal Earth World Map (formerly TrueSize), Equal Earth Country Game, Country Facts, Wiki Locations and World Cup map features primarily run in your browser. Depending on the page and action, your browser can contact map-tile and content-delivery providers, LocationIQ or Nominatim for searches, Wikipedia or Overpass for place information, and World Bank for public country statistics. Temporary markers, guesses and selected countries on those pages are not saved to your MarkAndMap account. Each page’s visible Privacy control explains its particular providers, location use and retention.

Maps you share

If you create an interactive sharing link, the map data needed to display it is included in the link itself. This can include coordinates, addresses, marker labels and map settings. Anyone who receives the link can view that information, so do not share sensitive maps publicly. The link does not contain your account, session or saved-map database identifier, and opening it does not require a MarkAndMap account.

Analytics

If you accept analytics, Google Analytics receives usage and device information such as pages viewed, approximate location, browser/device information and interaction data. MarkAndMap does not intentionally send account email addresses, saved-map names, marker labels, addresses or precise coordinates to Analytics. Analytics is not loaded if you decline.

Technical information

Hosting, CDN, map and API providers can receive normal request information such as IP address, time, requested URL, referrer and browser user agent when your browser contacts them.

Why we process information

• To provide requested map, search, location, account and saved-map functionality.
• To authenticate users, protect accounts and maintain service security.
• To comply with legal obligations and respond to valid legal requests.
• With your consent, to understand aggregate website usage through Google Analytics.

Account and requested service processing is necessary to provide the service you ask for. Security and basic service operation rely on legitimate interests and, where applicable, contractual necessity. Optional analytics relies on consent, which you can withdraw at any time.

Service providers and recipients

Depending on the page and feature, information can be processed by Supabase (authentication and cloud database), Google Analytics, OpenStreetMap tile providers, CARTO, Mapbox, LocationIQ, Nominatim, Overpass API, Wikipedia/Wikimedia, Wikidata, World Bank, and content-delivery providers such as jsDelivr and UNPKG. Their processing is governed by their own terms and privacy information.

International transfers

Some providers may process information outside Sweden or the EEA. Where required, providers use recognised transfer mechanisms such as adequacy decisions or standard contractual clauses. Review the provider links and settings before enabling additional integrations.

Retention

• Saved maps remain until you remove them or delete your account.
• Account data remains while the account is active and is removed through the account-deletion process, subject to necessary security backups and legal obligations.
• Locally cached location expires after 60 days or can be removed through browser storage controls.
• Analytics cookies are configured for a maximum of 180 days. Analytics event retention is controlled in the Google Analytics property.
• Provider security and access logs follow each provider’s retention settings.

Your choices and rights

You can decline or withdraw analytics through the visible “Cookie settings” control. You can deny browser location permission, remove individual saved maps, change account details, or delete your account from the Profile tab.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also withdraw consent without affecting earlier lawful processing. Contact markandmap@gmail.com. You may lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Security

MarkAndMap uses authenticated access and Supabase database controls to keep saved maps associated with their accounts. No internet service is completely risk-free; use marker labels and saved maps appropriately and avoid storing unnecessary sensitive information.

Changes

This policy may be updated when features or providers change. The date above shows the latest revision.