Scope and responsibility
This policy applies to the Histriphy website, account area, GeoJSON Studio, map submissions, protected downloads, support requests, and related online services. Histriphy is responsible for the personal information described here. Independent websites and services linked from Histriphy apply their own privacy policies.
For privacy questions or requests, contact info@histriphy.com.
Information Histriphy collects
- Account and profile
- Email address, display name, profile image, biography, account role, verification status, and preferences you choose to provide.
- Maps and contributions
- Submitted GeoJSON files, titles, descriptions, dates, categories, source notes, license information, review records, and communications about a submission.
- Downloads and activity
- Map identifiers, download times, allowance usage, and records needed to prevent automated or abusive downloading.
- Security and device data
- Sign-in events, session records, temporary security blocks, browser or device information, network request data, and privacy-preserving hashes derived from connection and device data.
- Support and rights requests
- Messages, attachments, contact details, and reasonable identity-verification information supplied when you ask for help or exercise a legal right.
Information you make public
Published map pages may show the contributor name, profile link, map title, description, period, categories, source notes, license, and other submitted metadata. Do not include private, confidential, or unnecessary personal information in a public submission.
GeoJSON Studio projects saved only in your browser are not uploaded to Histriphy until you deliberately import, submit, or otherwise send them to the service.
Purposes and lawful bases
Histriphy uses information to create and maintain accounts, provide requested maps and downloads, enforce fair-use limits, review and publish approved contributions, respond to support, protect accounts, detect misuse, maintain reliable records, comply with law, and improve the reliability of core features.
Where data-protection law requires a lawful basis, processing may be necessary to perform a service you request, comply with a legal obligation, protect Histriphy’s legitimate interests in security and service operation, establish or defend legal claims, or act on consent where consent is specifically requested. Consent can be withdrawn for future processing at any time.
Histriphy does not use solely automated decision-making that produces legal or similarly significant effects. Automated security controls may temporarily slow or block suspicious activity, and a user may contact Histriphy for review.
Google sign-in and authenticator security
Optional Google sign-in
If Google sign-in is offered and you choose it, Google authenticates you and provides a verified account identifier, email address, and the basic profile information included in the sign-in response. Histriphy uses this information only to sign you in, create or connect the correct local account, prevent account confusion, and protect the authentication process.
Histriphy does not receive your Google password and does not request access to Gmail, Google Drive, contacts, calendars, or files. Histriphy does not keep Google access or refresh tokens after the identity response has been verified. You can stop using Google sign-in without deleting your Google account, but you may need another available Histriphy sign-in method to access the local account.
Authenticator apps
If you enable two-step verification, Histriphy securely stores the information needed to operate that feature. Keep your recovery codes in a safe place and never share them.
Sharing and service providers
Histriphy may share only the information reasonably needed with providers that support hosting, security, transactional email, backups, and other essential infrastructure. Providers process information for the service they supply and under their own legal obligations.
- Google: receives and returns authentication information only when you deliberately choose Google sign-in.
- Map and tile providers: may receive ordinary network request information when a basemap or geographic reference layer loads.
- Authorities and professional advisers: information may be disclosed where reasonably required by law, legal process, safety, fraud prevention, or the protection of legal rights.
- Business transition: information may transfer during a genuine merger, financing, reorganisation, or sale, subject to appropriate confidentiality and notice where required.
Histriphy does not sell personal information and does not knowingly share it for cross-context behavioural advertising.
Retention and deletion
Account information is normally kept while an account is active and for a reasonable period afterwards where needed for security, disputes, legal compliance, or the protection of licensed contributions. Published map and attribution records may remain where removal would damage library integrity, licensing, or the rights of other users, but associated personal information will be limited where reasonably possible.
Information is kept only for as long as reasonably needed for the purpose described in this policy, including account operation, security, legal compliance, backups, disputes, and the protection of published contributions. Different records may have different retention periods.
You may ask to close your account or remove eligible personal information by emailing the address below. Backup copies may persist until the relevant backup cycle expires.
Security safeguards
Histriphy uses reasonable technical and organisational safeguards, including access controls, secure authentication, rate limits, protected file storage, encryption where appropriate, security logging, and HTTPS. Access is limited according to operational need.
No internet service can guarantee absolute security. Report suspected account misuse promptly. Never send a password, authenticator secret, recovery code, or Google client secret by email.
Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or information about how your personal data is used. You may also withdraw consent where processing relies on consent and complain to the data-protection authority that applies in your country.
Where processing relies on legitimate interests, you may object based on your particular situation. You may object to direct marketing at any time. Histriphy does not currently use personal information for direct marketing.
Histriphy may need to verify your identity before completing a request. Some information may be retained where required for security, legal obligations, freedom of expression, dispute resolution, or the rights of others. You will not be treated unfairly for exercising a privacy right.
International processing
Histriphy and its service providers may process information in countries other than the country where you live. Where the law requires it, reasonable contractual, technical, or legal safeguards will be used for international transfers. Local laws in those countries may differ from your own.
Children
Histriphy is not directed to children under 13 and does not knowingly allow them to create accounts. If local law requires a higher age for independent consent, a user below that age needs valid permission from a parent or guardian. Contact Histriphy if you believe a child supplied personal information without appropriate permission.
Changes and contact
This policy may be updated when services, providers, or legal requirements change. The effective date will be revised, and material changes will be highlighted on the website or sent to the account email where appropriate.
Send privacy questions or requests to info@histriphy.com. Include enough information to identify your account and explain the request, but do not include private credentials.