Privacy Policy
This Privacy Policy explains how The Social Grove ("Prospector Maps", "we", "us") collects, uses, and shares personal data when you use our website and application (the "Service"). We are the data controller for the personal data described here.
1. Information we collect
- Account data — your email address and name, provided when you register or sign in (including via Google). Passwords for email accounts are handled by our authentication provider and never stored by us in plain text.
- Field & usage data — the content you create in the app: saved waypoints, logged finds, trails, saved analyses, uploaded images, and preferences.
- Payment data — when you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not receive or store your full card number; we retain only a customer identifier, subscription status, and billing history.
- Technical data — IP address, device and browser information, and log data generated when you use the Service, used for security, debugging, and abuse prevention.
- Local storage — we store a session token and preferences in your browser to keep you signed in and remember settings. See "Cookies & local storage" below.
2. How we use your data
- To provide, maintain, and secure the Service and your account.
- To process subscriptions, payments, and send service-related emails (e.g. confirmation, password reset, and claim alerts you have opted into).
- To improve the Service, diagnose problems, and prevent fraud and abuse.
- To comply with legal obligations.
3. Legal bases (UK/EU users)
Where applicable law requires a legal basis, we rely on: contract (to provide the Service and process your subscription), legitimate interests (to secure and improve the Service), consent (e.g. optional communications, which you may withdraw at any time), and legal obligation (e.g. tax and accounting records).
4. Who we share data with
We share personal data only with service providers who process it on our behalf under appropriate contracts:
- Supabase — authentication and identity.
- Stripe — payment processing and subscription billing.
- Resend — transactional and alert emails.
- Render — application hosting and database.
- Cloudflare — file and map-tile storage and delivery.
- Google — where you choose to sign in with Google.
We do not sell your personal data. We may disclose data if required by law or to protect our rights, users, or the public.
5. International transfers
Our providers may process data outside your country, including in the United States. Where required, such transfers are covered by appropriate safeguards (for example, Standard Contractual Clauses).
6. Data retention
We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymise it, except where longer retention is required by law (e.g. billing records).
7. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data, object to or restrict processing, and withdraw consent. You can delete your account and its data from within the app (Account → Delete account). To exercise other rights, contact us at prospectormaps@proton.me. You may also complain to your local data protection authority.
8. Cookies & local storage
We use browser local storage for essential functions (keeping you signed in, remembering your theme and map preferences). We do not use advertising cookies. If we add analytics that require consent, we will present a cookie notice.
9. Security
We use industry-standard measures — encryption in transit, hashed credentials, access controls, and reputable infrastructure providers — to protect your data. No system is perfectly secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed to, and may not be used by, anyone under 18.
11. Changes
We may update this policy from time to time. Material changes will be posted here with a revised "last updated" date.
12. Contact
Questions or requests: prospectormaps@proton.me.