Privacy Policy
MapToNap (maptonap.com) is a browser-based toolkit for architectural site analysis, run by an independent developer based in Milan, Italy, who is the data controller. Questions and requests: [email protected].
The short version: there are no user accounts, no advertising and no tracking cookies. Most of the work happens in your browser. We only keep what is needed to sell, deliver and protect licences.
What stays in your browser
- Projects, drawings, settings and imported map files (for example Tianditu exports). Imported files are read on your device and are never uploaded.
- Your licence code, a random device identifier and a signed licence token, stored in your browser's local storage so paid features work on this device.
What we process on our servers
Purchases
Payments are handled by Stripe. Your card details go to Stripe, never to us. From Stripe we receive your e-mail address, the plan, the amount, the payment status and the checkout ID, which also serves as your licence code.
Licences
For each licence we store: e-mail address, licence code, plan, expiry date, your invitation code and invite count, the random device identifier the licence is active on, and a hashed session token. This lets us restore your licence, move it between devices and stop shared or stolen codes.
We send the licence code after purchase, a reminder 3 days before a 30-day pass ends, invitation rewards, and the code again if you ask for it. These messages are sent through Resend.
Security and fair use
To stop abuse, IP addresses are processed when you use our API. We keep only hashed IP addresses inside short-lived rate-limit counters (at most 48 hours), and daily usage counters per licence. Cloudflare, our hosting provider, keeps short operational logs.
Feedback
Messages you send through the feedback form, with the contact details you choose to add, are e-mailed to us and kept so we can reply and fix problems.
3D model export
The export service checks that your licence is valid and counts exports per licence. It stores a pseudonymous hash of your licence account, not your e-mail.
Statistics
We may use Cloudflare Web Analytics, which counts page views without cookies and without identifying you.
Map and data services
To draw a site, the coordinates of the area you select are sent to map services. Your browser contacts these services directly, so they see your IP address:
- OpenStreetMap Overpass servers (overpass-api.de, maps.mail.ru)
- OpenFreeMap (base map tiles)
- NASA POWER (climate data)
- AWS Open Data Terrain Tiles (elevation)
Place search and, for members, our paid OpenStreetMap data provider (Overspan) are reached through our server. They receive only the search text or the map area.
Why we process data (legal basis)
- Contract (GDPR Art. 6(1)(b)): selling and delivering licences, restoring them, sending the code and pass reminders.
- Legitimate interests (Art. 6(1)(f)): keeping the service secure and available, preventing fraud and abuse, answering feedback.
- Legal obligation (Art. 6(1)(c)): keeping payment and accounting records.
How long we keep it
- Licence records: while the licence is usable, and afterwards as long as accounting or tax rules require (in Italy, up to 10 years).
- Rate-limit counters: at most 48 hours.
- Feedback: up to 24 months.
Who processes data for us
Our processors are Cloudflare (hosting, API, storage), Stripe (payments), Resend (e-mail) and Overspan (map data for members). Some are based in the United States. Transfers rely on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses. We do not sell personal data and do not use it for advertising.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and you can object to processing based on legitimate interests. Write to [email protected]. Some purchase records must be kept by law, so we may not be able to delete them. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to the authority where you live.
Children
MapToNap is not directed at children under 14.
The iPhone app has its own policy: app privacy policy.
隐私政策
MapToNap（maptonap.com）是在浏览器里使用的建筑场地分析工具，由一位常驻意大利米兰的独立开发者运营，他也是数据控制者。联系：[email protected]。
简而言之：不需要注册账户，没有广告，也不使用追踪 Cookie。大部分处理都在你的浏览器里完成。我们只保存销售、交付和保护授权所必需的数据。
只保存在你浏览器里的内容
- 项目、图纸、设置，以及你导入的地图文件（例如天地图导出）。导入的文件只在你的设备上读取，不会上传。
- 授权码、随机设备编号和签名授权凭证，保存在浏览器本地存储中，用于在这台设备上开通付费功能。
我们服务器处理的内容
- 付款：由 Stripe 处理，银行卡信息不会经过我们。我们从 Stripe 收到邮箱、方案、金额、付款状态和结账编号；结账编号同时就是你的授权码。
- 授权：保存邮箱、授权码、方案、到期日、邀请码和邀请人数、授权所在设备的随机编号，以及经过哈希处理的会话凭证。
- 邮件：通过 Resend 发送授权码、30 天通行证到期前 3 天的提醒、邀请奖励，以及你申请找回的授权码。
- 安全与合理使用：为防止滥用，使用接口时会处理 IP 地址。我们只在短期限流计数中保存哈希后的 IP，最长 48 小时，另外按授权记录每日用量。托管服务商 Cloudflare 会保留短期运行日志。
- 意见反馈：你提交的内容和自愿填写的联系方式会发到我们的邮箱，并保存下来，以便回复和修复问题。
- 3D 模型导出：导出服务会核验授权并按授权计数，只保存授权账户的假名哈希，不保存邮箱。
- 统计：可能使用 Cloudflare Web Analytics。它统计页面访问量，不使用 Cookie，也不识别个人。
地图与数据服务
生成场地图时，你所选区域的坐标会发送给地图服务。以下服务由你的浏览器直接访问，因此它们能看到你的 IP 地址：
- OpenStreetMap Overpass 服务器
- OpenFreeMap 底图
- NASA POWER 气候数据
- AWS Terrain Tiles 高程数据
地点搜索，以及会员使用的付费 OpenStreetMap 数据服务（Overspan），通过我们的服务器中转，对方只会收到搜索文字或地图范围。
处理依据
- 履行合同：销售、交付和恢复授权。
- 正当利益：维护服务安全与可用，防止欺诈和滥用，回复反馈。
- 法定义务：保存付款和会计记录。
保存期限
- 授权记录：在授权可用期间保存；之后按会计与税务规定保存，在意大利最长 10 年。
- 限流计数：最长 48 小时。
- 反馈：最长 24 个月。
数据处理方
为我们处理数据的服务商包括 Cloudflare、Stripe、Resend 和 Overspan，其中部分位于美国。数据跨境传输依据欧美数据隐私框架或欧盟标准合同条款。我们不出售个人数据，也不将其用于广告。
你的权利
你可以申请访问、更正、删除、限制处理或获取数据副本，也可以反对我们基于正当利益的处理。法律要求保留的购买记录可能无法删除。你也可以向意大利数据保护机构 Garante per la protezione dei dati personali，或你所在地的监管机构投诉。
未成年人
本服务不面向 14 岁以下儿童。iPhone App 另有隐私政策：App 隐私政策。