Privacy Policy
Last updated: August 2026
1. Introduction
Welcome to Maptheory. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our website.
2. Data Controller
Maptheory is operated as a personal project. For any privacy-related inquiries, please contact us at:
3. Data We Collect
When you use Maptheory, we may collect the following information:
3.1 Account Information (via Google OAuth)
If you choose to sign in with Google, we receive and store:
- Your email address
- Your name
- Your profile picture (avatar)
3.2 Usage Data
We use a self-hosted, cookie-free Umami analytics instance to collect aggregated page views and general traffic patterns. The analytics database is operated with Maptheory infrastructure and is used to improve the service.
3.3 Content and AI Requests
Chats, uploaded images, saved statistics, game activity, and other content you choose to store are kept in Maptheory's database or upload storage. Prompts and necessary context are sent through our AI gateway to the selected model provider when you use an AI feature.
4. How We Use Your Data
We use your data to:
- Authenticate you and maintain your session
- Personalize your experience (e.g., saving game progress)
- Provide and improve our services
- Respond to your inquiries
5. Data Storage and Security
Your data is stored securely using:
- Maptheory-operated PostgreSQL and storage - User accounts, application data, and new uploads are stored on the same access-restricted Hetzner infrastructure as the application
- Encrypted backups - Database and upload backups may also be kept in encrypted off-site object storage for disaster recovery
Session tokens are stored for up to 30 days to keep you logged in. You can log out at any time to end your session.
6. Third-Party Services
We use the following third-party services:
- Google OAuth - For authentication. Subject to Google's Privacy Policy
- Hetzner - For server and database hosting. Subject to Hetzner's Privacy Policy
- Vercel AI Gateway and AI model providers - For routing and processing requests to AI features. The prompt, relevant chat context, and generated response are processed by the provider selected for that feature, which may include OpenAI, Google, Anthropic, xAI, or Perplexity. Vercel AI Gateway is subject to Vercel's Privacy Policy
- LiveKit Cloud - For optional multiplayer voice chat. Voice media is processed when you enable and join voice chat.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of Access - Request a copy of your personal data
- Right to Rectification - Request correction of inaccurate data
- Right to Erasure - Request deletion of your personal data
- Right to Data Portability - Receive your data in a machine-readable format
- Right to Object - Object to processing of your personal data
To exercise any of these rights, please contact us at themaptheory@gmail.com.
8. Cookies
We use essential cookies only for authentication purposes (session cookies). We do not use tracking cookies or third-party advertising cookies. Our self-hosted Umami analytics is configured without tracking cookies.
9. Children's Privacy
Our service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date.
11. Contact Us
If you have any questions about this privacy policy or our data practices, please contact us at: