Privacy
Last updated September 23, 2026
What we collect
- Nothing, until you sign in. Browsing the map needs no account and sets no tracking cookies.
- If you sign in with Google: your Google ID, email address, display name and profile picture, so we can show who's signed in and keep your saved places. One session cookie (
hc_session) keeps you signed in for 30 days. - Saved places: the places you heart, tied to your account.
- Server logs: standard request logs (IP address, page, time) kept briefly by our host, Railway, for security and debugging.
What we don't do
No ads, no analytics trackers, no selling or sharing your data. We don't read your location unless you tap the locate button, and it never leaves your device.
Third parties that see requests
- Map tiles: OpenFreeMap and AWS (terrain) receive tile requests from your browser.
- Google: sign-in (if you use it) and live place details, which our server fetches on your behalf when you open a place; photos load from Google's servers.
- Fonts: Google Fonts.
Where it lives
On a server in the United States hosted by Railway, with nightly backups.
Your choices
Sign out any time. To delete your account and saved places, email hello@hellocville.com from your Google address and it's gone within a week.