Privacy Policy

You can browse maps and census data without signing in. When you do:

• Our web servers keep standard access logs (IP address, browser user agent, requested URL and time) for security and to keep the service running.
• To centre new maps near you, we look up an approximate location (city/region) for your IP address in a database hosted on our own servers. This lookup is not stored and your IP address is not sent to a third party for it.
• We use Google Analytics to understand how the site is used in aggregate (for example, which pages are visited). Google Analytics sets cookies and receives information such as your IP address and browser details. See how Google uses information from sites that use its services. You can opt out with the Google Analytics opt-out browser add-on.

You can register with an email address and password, or sign in with Google or GitHub. Depending on how you sign up, we store:

• your email address and display name;
• your password, stored only as a one-way hash (never in readable form);
• if you sign in with Google or GitHub: your name, email address, profile picture URL and the account identifier that provider assigns to you. We request only basic profile access (for Google, the openid, email and profile scopes). We do not access your contacts, files, email or any other data in your Google or GitHub account;
• a profile picture, if you upload one;
• sign-in records: account creation time, number of sign-ins, and the time and IP address of your most recent sign-ins, used to protect your account;
• the maps you create, including their titles, descriptions and settings;
• if you use the data API: your API key and counts of your API usage, used to enforce quotas.

We use the information above only to:

• provide CensusMapper: signing you in, saving your maps and showing your name on maps you publish;
• send transactional email such as account confirmation and password-reset messages;
• enforce API usage limits;
• keep the service secure and diagnose problems;
• produce aggregate statistics about the service (for example, the number of registered users shown on our About page).

We do not sell your personal information, we do not use it for advertising, and we do not send you marketing email.

CensusMapper's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share personal information only with service providers that help us run CensusMapper:

• our hosting provider, DigitalOcean, whose servers in Canada store the data described here;
• our email delivery provider, which sends transactional email to your address;
• Google, for Google Analytics as described above;
• Google or GitHub, when you choose to sign in with them.

Your account information and maps are stored on servers located in Canada. Google (for Analytics and sign-in), GitHub and our email delivery provider may process information outside Canada. We may also disclose information if required by law.

• cm_session: keeps you signed in (up to 30 days). It is only set when you sign in.
• cm_lang: remembers whether you chose English or French (up to one year).
• Google Analytics cookies, as described above.

CensusMapper also uses your browser's local storage for conveniences such as unsaved map drafts, tutorial progress and recently visited maps. This information stays in your browser and is not sent to us.

We keep your account information for as long as your account exists. You can view and change your profile, and delete your account, from your profile page. Deleting your account removes your account, profile information and all of your maps. If you had an API key, it is deactivated and disconnected from you; aggregate usage counts are kept without any link to your identity.

If you signed in with Google, you can also remove CensusMapper's access at any time from your Google Account settings.

You may ask us for a copy of your personal information, or to correct or delete it, by emailing jens@mountainmath.ca.