Privacy Policy

Locatrove is operated by Jay Digital. When this policy says "we", it means Jay Digital. When it says "you", it means the person using the service.

Only what the service needs to work. In practice that is:

• Your account. Your email address, a display name, a handle, and a password that is stored only as a one-way hash, never as the password itself.
• Your logs. The coordinates you pin, the name you give a spot, and the notes you write: light, angles, access, parking, permits, subjects, and the privacy tier you chose for each.
• Photos you attach to a log, if and when you add them.
• Support messages. When you contact us, we keep what you send, plus the page you were on and any errors your browser recorded, which the form shows you before you send it.

We do not run advertising trackers, and we do not buy or sell personal data. There is no third-party analytics script following you around the site.

Every log you write is set to one of three tiers, and you choose it: private, publicly anonymous, or public.

While you are the only person who has logged a place, a private log is readable by you and nobody else. Not other users, and not the operator.

Locatrove is a shared collection of locations, so there is a catch, and we would rather you hear it here than discover it later. If enough separate people independently log the same place, that place becomes a shared entry, and the notes from every log there are pooled so everyone can use them. That includes notes that were written privately. When this happens, your notes are never shown with your name attached unless you chose the public tier. A spot several people found on their own was never really a secret, and the pooled notes are the whole point of the shared database.

One field is different. The private note on each log is sealed to you under every condition. No merge, no setting, no member of staff, and no amount of convergence ever makes it readable by anyone else. If there is something you never want pooled, that is where it goes.

To run the service: to sign you in, to show you your own spots, to build the shared map from logs that are public or have converged, to send you the occasional email you asked for such as a verification or password reset, and to answer your support messages.

We do not use your logs to profile you or to target advertising, because we do not do advertising.

A small set of service providers process data on our behalf so we do not have to run everything ourselves. Each sees only what it needs:

• Neon hosts the database where your account and logs are stored.
• Vercel hosts the application and stores any photos you upload.
• Resend delivers the transactional emails, so it handles your email address when a message is sent to you.
• A map tile provider serves the base map your browser draws. Loading map tiles reveals your device address and the area you are looking at to that provider, as it does on any map on the web.
• Stripe would process payments if paid subscriptions launch. Card details go straight to Stripe and are never seen or stored by us. Paid subscriptions are not active today.

We keep this light. A sign-in cookie keeps you logged in. A short-lived cookie holds the answer to the picture puzzle on public forms, so a bot cannot read it from the page. Your light or dark theme choice is remembered in your browser. That is all. No advertising or tracking cookies.

Your account and logs stay until you remove them or ask us to close your account. Notes that have been pooled into a converged shared entry are part of that shared record and may remain even after you delete your own copy, in the same way a contribution to any shared reference does. Support messages are kept while they are useful for helping you and improving the service.

You can ask to see the data we hold about you, correct it, delete individual logs, or close your account entirely. Today the fastest way to do any of that is to contact us and we will action it promptly. As self-serve controls for this ship, they will appear in your settings.

Deleting a private log removes it. Deleting a log that had already been pooled into a shared entry removes your copy, and the pooled, unattributed contribution may remain as part of the shared record.

Locatrove is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

If this policy changes in a way that matters, we will update the date at the top and, for significant changes, tell you. Continuing to use the service after a change means the updated policy applies.

Questions about your privacy, or a request about your data, go through the contact form. Every message is stored and read by a person, and you get a reply at the address you give.