This is a draft policy. We are working with counsel to finalize the wording before public launch — the spirit below stands; the legal precision will improve.
What we collect
- Your email address when you sign in. We use it to authenticate your sessions and to send transactional emails (badge claim updates, listing submission status).
- The listings you create or claim. Names, contact details, hours, services — exactly the fields you fill in. These are public by design.
- Anonymous traffic counts for listings you own (page views, direction taps) so the owner dashboard can show useful analytics. We don't tie these to individual visitors.
What we don't do
- We don't sell your data.
- We don't load Google Analytics or any third-party tracker that fingerprints you.
- We don't store your location (the map runs entirely in your browser).
Owner home addresses
Practitioner home addresses, and any listing tagged for home visits only, are stored at full precision but the public map only ever shows a deterministically fuzzed pin within ~1 mile of the real location. The exact coordinates never leave our server for these listings.
Account deletion
Email us if you want your account deleted. Listings you own will become unclaimed (anyone with a verified ownership claim can take them over) rather than vanish from the map.
Cookies
One session cookie set by our auth provider when you sign in, and nothing else. The cookie is HttpOnly, Secure in production, and SameSite=Lax. No tracking cookies, no advertising cookies.