Last updated: April 18, 2026

1. Data controller

idomaps is operated by Quentin Roudier, based in France. For any questions regarding your personal data, you can contact us at: contact@idomaps.com

2. Data we collect

Account information: when you sign in via Google or GitHub, we receive and store your name, email address, and profile picture as provided by the authentication provider.
Map data: the maps you create, including features, metadata, and associated files.
Technical data: IP address, browser type, and access timestamps in server logs, collected automatically when you use the Service.

3. Why we collect it

Account information: to authenticate you, associate maps with your account, and display your name on public maps you publish.
Map data: to provide the core functionality of the Service (saving, editing, publishing maps).
Technical data: for security, abuse prevention, and debugging purposes.

Legal basis (GDPR Article 6): legitimate interest for the operation of the Service and performance of the contract you accept by using idomaps.

4. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be processed by:

Convex (database and backend hosting)
Vercel (web hosting)
Google / GitHub (authentication providers)

These providers act as data processors and have their own privacy policies. We may also disclose data if required by law or a court order.

5. Data retention

Account data: retained as long as your account exists.
Map data: retained as long as the map exists in your account. Deleted maps are permanently removed.
Server logs: retained for up to 12 months.

6. Your rights

European users (GDPR)

Under the General Data Protection Regulation, you have the right to:

Access your personal data
Rectify inaccurate data
Delete your account and associated data
Export your data (you can export your maps in .idomaps format at any time)
Object to processing based on legitimate interest
Lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes) or your local data protection authority

California residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

Know what personal information we collect and how it is used
Delete your personal information
Opt out of the sale of personal information — we do not sell your data
Non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at contact@idomaps.com. We will respond within 30 days (GDPR) or 45 days (CCPA).

7. International data transfers

Your data may be processed in the United States (Convex, Vercel) and in the European Union. Where data is transferred outside the EU, our service providers rely on Standard Contractual Clauses or equivalent safeguards to ensure adequate protection of your personal data.

8. Cookies

idomaps uses only essential cookies required for authentication and session management. We do not use tracking cookies, advertising cookies, or analytics cookies. No cookie consent banner is required as we only use strictly necessary cookies.

9. Children

idomaps is not directed at children under 16 (or under 13 in the United States). We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The date of the last update is indicated at the top of this page. Continued use of the Service after changes constitutes acceptance.

11. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at: contact@idomaps.com