Privacy policy
Last updated:
Who is responsible
3FORTSOFT, a French SAS registered with the RCS Strasbourg under number 989 618 509, 91 Route des Romains, 67200 Strasbourg, France. For any question about your data: support@mapstrack.app.
In short
- MapsTrack reads your Street View photos read-only. It never publishes, edits or deletes anything in your Google account.
- We don’t sell your data, we show no ads, and we don’t profile you.
- View history is erased automatically after 400 days.
- You can delete your account from the app at any time.
The data we use
| Data | What it is for | How long |
|---|---|---|
| Your Google account: name, email address, profile picture, identifier | Creating your MapsTrack account and signing you in | Until you delete your account |
| Your Street View authorisation (OAuth refresh token) | Syncing your photos every night without asking you to sign in again | Until you unlink Street View or delete your account. It is then revoked with Google and destroyed. |
| Details of your published photos: identifier, view count, publication status, capture and upload dates, position (latitude, longitude, altitude, heading), thumbnail link, linked places and businesses, Google Maps share link, links to your other photos | Showing your statistics, colouring in covered communes, spotting problems, suggesting your next outing | While the photo is published and your account exists. A photo removed from Google Maps is kept for 400 days, marked as removed, then erased. |
| The commune, region and country of each photo, worked out from its position | The coverage map and the outing planner | Same as the photo |
| History: a daily record of views per photo and for your account, and the recap of each sync | Comparisons over time, alerts, the morning recap | 400 days, then erased automatically |
| Your settings: notifications, photo alerts, language, home commune | Making the app work the way you chose | Until you delete your account |
| Your device’s notification identifier | Sending you the recap and alerts | Until you sign out on that device or delete your account |
| Server logs (account identifier, errors) | Fixing failures and protecting the service | 30 days |
| If you agree, the app’s crash reports: phone model and system, app version, memory state, technical trace of the error, random installation identifier | Finding and fixing crashes | 90 days |
| If you agree, usage statistics: screens opened (map and country shown, planner, alerts), syncs, days of use, phone system version, app version, country, random installation identifier | Knowing which features are used and whether the app stays useful over time | 2 months |
| Emails you send us | Replying to you, and telling you about the launch if you asked | 3 years after our last exchange |
Without a Google account, you can’t create a MapsTrack account. Without access to Street View, MapsTrack can’t read your photos and the app stays empty. Notifications are optional.
Crash reports and usage statistics are optional, and off until you answer at first launch. They contain neither your name, nor your email address, nor your photos, and are not linked to your account. You can change your mind at any time in Profile, under “Privacy”. If you withdraw your agreement to statistics, the installation identifier is erased. No advertising identifier is collected.
Some display choices (theme, map palette, zones shown, planner radius) stay on your phone only.
We don’t copy your photos: the app shows their thumbnails straight from Google. We don’t collect your phone’s location: the planner starts from the commune you choose.
Legal basis
- Providing the service you ask for when you create an account (GDPR article 6.1.b), for everything above except the next two points.
- Your consent (article 6.1.a) for notifications, crash reports and usage statistics. You withdraw it in the app’s or your phone’s settings.
- Our legitimate interest (article 6.1.f) in keeping the service reliable and secure, for server logs.
Google user data
With your permission, MapsTrack accesses your Street View account through the streetviewpublish scope, only to read your published photos and their statistics. That scope would also allow editing photos; MapsTrack never uses it for that.
MapsTrack’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice:
- we use this data only for the MapsTrack features you see in the app;
- we don’t sell it and don’t use it for advertising;
- we don’t use it to train artificial intelligence models;
- nobody reads it, unless you ask us to (for example to look into a problem), for security, or when the law requires it.
You can revoke this access at any time: in the app (Profile, “Unlink”) or in your Google account settings.
Who receives your data
- Google (Firebase and Google Cloud) hosts the service: sign-in, the database (in Europe), the nightly processing (in Belgium), storage of the access token, notifications and logs, and, if you agree, crash reports (Firebase Crashlytics) and usage statistics (Google Analytics for Firebase).
- Google Maps provides the Street View preview shown in the app. Your phone requests it directly from Google, which therefore receives your IP address and the photo’s position.
- The Base Adresse Nationale (French State) receives the position of your photos in France, to find their commune. It does not receive your name or account.
- Vercel hosts this website.
Outside France, the commune of your photos is found on our own servers, from public maps: their position is sent to no one.
We share your data with no one else. These providers process the data on our behalf, following our instructions.
Transfers outside the European Union
Google LLC and Vercel Inc. are US companies. Some Google services (sign-in, notification delivery, crash reports and statistics in particular) may process data in the United States. These transfers rely on the European Union’s adequacy decision for companies certified under the Data Privacy Framework, which includes Google and Vercel, backed by the European Commission’s standard contractual clauses. You can get a copy of these clauses by writing to us.
Security
Connections are encrypted. Each account can read only its own data. The Street View access token is kept in an encrypted secrets vault, never on your phone or in the database.
The mapstrack.app website
The website sets no cookies, uses no audience measurement and loads nothing from another site. Its host keeps server logs (IP address, page requested) for a short time, for security.
Your rights
You can access your data, have it corrected or erased, restrict or object to its use, get a copy in a readable format, and withdraw your consent. You can also tell us what to do with your data after your death.
The simplest way to erase everything: delete your account. For anything else, write to support@mapstrack.app from your account’s address. We reply within one month.
If you think we are not respecting your rights, you can complain to the CNIL, the French data protection authority (cnil.fr), or to the authority in your country.
Minimum age
MapsTrack is meant for people aged 15 and over.
Changes
If we change this policy in a significant way, for example to use new data or for a new purpose, we will tell you in the app before the change applies. The date at the top shows the latest version.