Privacy

PMapa keeps what you put into it — your account, your profile, your trips, your posts and your messages — and nothing else. There is no advertising here, no analytics service watching you, no trackers, and nothing is sold or handed to anyone for marketing. You can delete the whole account from Settings, and it really is deleted.

• Your account. Your email address and a password that is stored only as an argon2id hash — we cannot read it, and neither can anyone who takes a copy of the database. The handle you choose at sign-up. Without this there is no way to let you back in.
• If you sign in with Google. Google's stable identifier for you, your email address, and whether Google considers it verified. We never see your Google password and have no access to anything else in your Google account.
• Your profile. Display name, handle, short bio, the location text you type and your photo. All of it is public to anyone using PMapa — that is the point of a profile.
• What you make. Trips and their stops, the countries and cities you mark as visited, posts, comments, likes, saves, property listings, bookings, goods you list, and the photos you upload. Some of this is public (posts, listings, profiles), some is not (your bookings, your saved items).
• Your messages. Conversations, their messages and reactions, and who has read what. They are stored so they can be delivered and read again later. They are not end-to-end encrypted: we could technically read them, and we do not.
• Devices and sessions. A label and identifier per signed-in device, the time it signed in, and a hashed refresh token. Your browser also generates a key pair that never leaves it, so a stolen token cannot be used from another machine. Settings lists your sessions and ends any of them.
• Server logs. The gateway records requests — address, time, path, result — to keep the service running and to see abuse. They are operational records, not a profile of you.

• Other people using PMapa, for the things that are public by design: your profile, your posts and comments, your listings, and the messages you send to them.
• Google — only if you choose to sign in with Google, and only as part of that sign-in.
• Unsplash, whose image service serves some of the photography in the app. Loading an image tells them your IP address, as any image on any website does.
• Our hosting provider, who runs the machine the service sits on.
• Nobody else. No advertising networks, no analytics vendors, no data brokers, no “partners”.

No advertising or tracking cookies — none at all. The browser stores your sign-in tokens and the device key in IndexedDB, a trip you are part-way through planning in sessionStorage, and small preferences such as your chosen language in localStorage. Clearing site data signs you out and forgets all of it.

Settings → Delete account ends every session and erases your account: the credentials, the profile, the trips and visited places, the posts, the listings, the goods and the notifications. It cannot be undone, and we do not keep a shadow copy. Messages you sent to other people may remain in their conversations, as a letter does once posted.

You can also change your mind in smaller ways: edit or clear your profile at any time, delete a post or a comment, take a listing down, or end one device's session without touching the others.

You can see what we hold (it is what the app shows you), correct it, and delete it. If you would rather have a copy or want anything explained, write to fggnb45598@gmail.com and a person will answer.

No payment goes through PMapa today, so there is no card number, no bank detail and no payment history in any of this. When paid parts arrive — holding a payment between two people, promoting a listing, buying tickets or an eSIM — the money will be handled by a payment provider rather than by us, and this page will name that provider and say exactly what they receive before the first payment is taken.

Your data is stored on a server rented from a commercial hosting provider and kept while your account exists. Delete the account and it goes with it. A conversation can be set to delete its own messages after a chosen time, and does.

PMapa is not built for children and is not intended for anyone under 16. If you believe a child has an account here, write to us and we will remove it.

When the service starts keeping something new, this page changes with it and the date at the top moves. If a change matters to you — a new recipient, a new kind of data — you will be told in the app rather than left to notice a date.