Privacy Policy

What we collect

• Pin data. The URL or @handle you submit, the region you pick, and the title, description and icon publicly available at that URL. All of this is shown publicly on the map — that is the point of the product.
• Payment records. The amount, the timestamp, the payment reference from our processor, and the billing country. We use the country only to show a flag next to recent bids.
• Click counts. When someone clicks through to your pin we record the click and a one-way hash of the visitor's IP address. We store the hash, never the address itself.
• Visitor counts. A one-way hash of IP and user agent, rotated daily, so we can show “online now” and a lifetime visitor number. It cannot be reversed and is not linked to a person.

What we don't collect

• No accounts, so no names, passwords or emails on our side.
• No card numbers. Payments go directly to Dodo Payments, our merchant of record — we never see or store payment details.
• No third-party advertising or retargeting pixels. No cross-site profile.

Processors

• Supabase — database hosting for everything described above.
• Dodo Payments — merchant of record. They handle payment data under their own privacy policy.
• Vercel — hosting and ordinary server logs.
• Plausible Analytics — privacy-friendly page analytics. No cookies, no personal data, EU-hosted.

Your choices

Because there are no accounts, the only personal data we hold is what you chose to make public by pinning it. If you want a pin removed, email hello@pinmap.lol from an address associated with that domain and we will take it down. Removal does not come with a refund — see the terms.

Retention

Pins, bids and click counts are kept for as long as the map runs, because the public receipts are part of the product. Visitor hashes are kept in daily buckets and are not useful beyond aggregate counts.

Contact

Privacy questions go to hello@pinmap.lol.