Privacy Policy

Overview

MapToArt (“we,” “us,” or “our”) generates custom map posters from real city geometry. This policy explains what data we collect, why, and how we protect it. We keep things simple: we collect only what we need to deliver your posters and process your payment.

Data We Collect

Information you provide

• Email address, used to deliver your order confirmation and download links, and to send a few follow-up messages about that order. Every follow-up carries a one-click unsubscribe link.
• Poster configuration, city name, coordinates, theme, dimensions, and other design choices you make when creating a poster.

Information collected automatically

• IP address, used temporarily for rate limiting to prevent abuse. IP addresses are not stored permanently or linked to your account.
• Browser locale, detected from your browser settings to display prices in your local currency. Not stored on our servers.

How We Use Your Data

• Generate and deliver your poster renders
• Process payments securely through Stripe
• Send transactional emails (order confirmations and download links)
• Provide order lookup so you can access past purchases
• Rate-limit API requests to maintain service stability

Besides those transactional emails we send a few follow-ups: a reminder if you leave a purchase unfinished, a review request after delivery, and designs related to what you bought. Each one carries a one-click unsubscribe link, and opting out never affects access to the posters you already own.

Third-Party Services

Stripe (Payments)

We use Stripe to process payments. When you purchase a poster, your payment information (card details) is handled entirely by Stripe. We never see, store, or have access to your full card number. Stripe’s privacy policy governs how they handle your payment data.

OpenStreetMap / Nominatim (Map Data)

We use OpenStreetMap data to render posters and the Nominatim geocoding service for city search. When you search for a city, your query is sent to the Nominatim API. Map data is licensed under the Open Database License (ODbL).

Sentry (Error Tracking)

We may use Sentry to track application errors. If enabled, Sentry may collect technical information about errors you encounter (browser type, error messages, stack traces). This data is used solely to fix bugs and improve reliability.

Google Customer Reviews

After a purchase we show an optional survey from Google Customer Reviews on the order confirmation page. If you opt in, we share your email address, order number, delivery country and estimated delivery date with Google so it can email you a review request later. The module only loads once you have accepted analytics cookies, and you can decline the survey itself.

Analytics and Measurement

With your consent we load the tools below. They record how the pages are used, never your payment details, and none of them loads if you decline.

• Google Analytics, aggregated traffic: which pages are visited, which city and palette are chosen, and how fast the site loads for you. It runs in Consent Mode, so nothing is sent before you accept.
• Microsoft Clarity, records interactions with the page, such as clicks, scrolling and mouse movement, and replays them so we can see where the design gets in the way.
• Pinterest tag, tells us whether a purchase came from one of our pins, and nothing else. It belongs to the marketing category, so it loads only if you accept that one.

Gelato (Printing and Shipping)

Printed posters are produced by our print partner Gelato. When you order a print, we pass them your name, shipping address, email address and the poster file so they can print it and ship it to you. They receive only what the delivery needs, they do not use it to contact you about anything else, and digital downloads never reach them.

Cookies and Local Storage

Cookies

• NEXT_LOCALE, stores your language preference so the site displays in your chosen language on return visits. This is a functional cookie, not used for tracking.
• Measurement cookies, the tools listed above set their own cookies once you accept the matching category in the banner. Decline, and none of them is set.

Local Storage (Browser)

• Saved designs , your poster configurations are saved locally in your browser so you can resume editing. This data stays on your device and is never sent to our servers unless you generate a preview or place an order.
• Form state , the poster creation form auto-saves your progress in your browser’s local storage.
• Theme preference , your choice of light or dark mode is stored locally.
• Other local preferences , your cookie choice, so you are not asked again; the email address you last used, so you do not retype it; and notices you have dismissed. None of it leaves your device.

We do not use advertising cookies that follow you around other websites, and we never sell your data. The measurement tools listed above load only after you accept the matching category in the cookie banner: decline it and none of them runs.

Data Retention

• Orders and email addresses , kept indefinitely so you can access your download links at any time.
• Preview renders , temporary low-resolution previews are cleaned periodically and not kept long-term.
• High-resolution renders , stored as long as the order exists so you can re-download your posters.
• IP addresses, used only in-memory for rate limiting and not stored permanently.

Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Access, request a copy of the personal data we hold about you.
• Rectification , request correction of inaccurate data.
• Deletion, request that we delete your personal data. Note that this will also remove access to your purchased posters.
• Portability , request your data in a machine-readable format.
• Objection, object to certain types of processing.

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

Data Security

We protect your data using industry-standard security measures including encrypted connections (HTTPS), secure payment processing via Stripe, and access-controlled download tokens with time-limited expiration. However, no method of electronic transmission or storage is 100% secure.

Children’s Privacy

MapToArt is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated “last updated” date. Continued use of MapToArt after changes constitutes acceptance of the updated policy.