Back to the editor

Privacy

Making a poster needs no account, and nothing you design reaches us until you sign in: the editor runs in your browser. Buying one does need an account, because a purchase has to belong to someone. This page describes both halves.

What stays on your device

  • Your project — spots, marker, shape and styling — is saved in this browser’s local storage so you can close the tab and come back.
  • A marker image you upload is resized in the browser and stored the same way. It is never uploaded anywhere.
  • The exported poster is drawn on a canvas on your machine and saved straight to your downloads.
  • If you use locate me, your browser asks for permission and the position is only used to move the map. It is not stored or sent anywhere.

Clearing your browser data deletes all of it, and we cannot recover it. Use Save to a file to keep a copy as a file.

What leaves your browser

  • Map tiles are requested from OpenFreeMap, which serves OpenStreetMap data as vector tiles with no account and no API key. Those requests tell them which part of the world you are looking at, along with the usual things any web request carries.
  • Place search sends what you type to Nominatim, run by the OpenStreetMap Foundation. Clicking the map sends those coordinates to the same service to find a name for the place.
  • The city list and the emoji artwork are files served with the app itself — using them involves no third party.

Each of those services has its own privacy policy, which we do not control. If you would rather not use search at all, the coordinate and city-list inputs work without contacting anyone.

What we keep once you buy

Nothing is kept for browsing or designing. It begins at the purchase, because a purchase has to belong to someone and stay available afterwards — and buying needs no account, so this happens whether or not you ever give us your name.

  • An email address, once there is one. Buying does not require it: what the payment records is the address you give Stripe, kept on the order so a receipt can reach you and so you can find the purchase again later. If you go on to make an account, Firebase Authentication (Google) holds that address as your sign-in.
  • The poster you buy, stored in Firestore in the EU (Frankfurt) from the moment you pay — the price and the order have to be worked out against something. This is also what makes “my projects” possible and what lets a paid poster be downloaded again later. A poster you never buy is not uploaded.
  • A record of each order: what was bought, what it cost, which coupon was used, and the moment you accepted the terms and asked for immediate delivery.
  • Not the finished images. Those are drawn in your browser each time you download them and are never uploaded.
  • Not the pictures you upload either. A photo used as a marker stays in the browser you chose it in — it is never sent to us, not even as part of a saved project, which is why opening that project elsewhere asks you for the file again.

Payment

Card payments are handled by Stripe on their own page. Your card details never reach us. Stripe collects a billing address and issues the invoice, and is an independent controller for that — their privacy policy governs it.

Transfers outside the EU

Firebase Authentication stores account data on Google servers in the United States; Firestore, where the projects live, is in the EU. Stripe and Cloudflare also process data in the United States. These transfers rely on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

How long

Projects stay until you delete them or close your account. Order records have to be kept for eight years under Hungarian accounting law, so deleting your account takes your name off them rather than erasing them, and an invoice already issued stays with our invoicing provider for those same eight years.

Your rights

Two of those you can do yourself, signed in, under My projects: one button downloads everything this account holds as a file, the other closes the account and deletes what is in it. For anything else — a correction, or a request about an order made as a guest — write to the address on the company details page, and we answer within a month. You may also complain to the Hungarian data protection authority (NAIH).

Cookies

There are none for analytics or advertising, because there is no analytics or advertising. Buying stores a token in your browser — that is what the purchase is filed under, before there is an account and after — and signing in does the same. Both are strictly necessary for a purchase to work, so neither is something you are asked to consent to, only something you should know about.

What we do not do

No analytics of our own, no tracking pixels, no ads, and no profiling. A poster you never buy does not reach us at all; the places in one you did buy are stored so that you can open it again, and are used for nothing else. Nothing here is sold or shared with anyone beyond the services named above, each of which acts on our instructions.