Legal / 02
Privacy Notice
How we process visitor and contributor data. Updated 2 October 2026.
Leggi in italiano · Cookie Policy · Terms of Service
Controller
Lorenzo Vassallo, operator of the Maps of Details project, VAT no. 04079010049, Saluzzo (CN), Italy. For information and rights requests: contributi@mapsofdetails.com.
Data and purposes
For registration and access we use your email, identifiers from the method you choose (Google, ChatGPT or email code), session data and profile details you enter: name or studio, optional profession, city, website, social link and avatar. We record the version and time of required account-term acceptance. This supports access, attribution and account management.
For posts we process descriptions, photographs and their possible embedded metadata, drawings, PDFs, CAD/3D files, technical details, locations, coordinates, attribution and sources. Version and time of new-file licence acceptance are recorded separately. We process requests and reports to respond, and technical security data, including a transformed IP fingerprint where used, to prevent abuse.
Location and publication
The map may ask the browser for your position to calculate distances or center the view. You can deny permission; this browsing position is not saved in your profile. Coordinates you deliberately attach to a post are stored with it. Public profiles, attribution, uploaded material and post locations can be viewed by visitors. Approximate locations are displayed with reduced precision. Email and security data are not published. Original photographs may retain location metadata: check them before upload.
Privacy checks on new photographs
For photographs uploaded through the new privacy workflow, format conversion and automatic face/text detection run locally on your device, without sending photographs to external detection services. Models and software are served by Maps of Details. Results may be incomplete or incorrect: review the public copy and correct suggested areas before continuing. Uncertain text is not automatically obscured. This check does not certify that personal data is absent.
The original may be stored privately in our hosting storage for authorised correction and regeneration. Access requires authentication and ownership or administrator authorisation. Only a separate web-compatible copy, with selected areas permanently obscured in its pixels and without embedded EXIF metadata, is used publicly. We store scan state/date, area coordinates and counters, manual edits and a public-copy identifier, not the text recognised by OCR. Originals are retained while needed for correction and administration, subject to deletion requests and applicable obligations; deleting a post also removes its linked originals. Public copies remain independent of originals. Previously uploaded photographs are not rescanned or changed automatically.
Legal bases
Accounts and publishing are necessary to perform the service agreement or take steps at your request. Security, abuse prevention, editorial checks and disputes rely on legitimate interests, balanced with your rights. Legal obligations apply where relevant. Optional Google Street View content loads only after your revocable choice. Reading this notice is not consent to unrelated processing.
Recipients and services
Site hosting, database and file storage use the Sites infrastructure on Cloudflare; Supabase handles authentication and email codes, with Google or ChatGPT as external identity providers if chosen. OpenFreeMap supplies map tiles; OpenStreetMap Nominatim can be queried server-side to resolve a location. Google Fonts supplies fonts. Google Maps Street View is embedded only if allowed; external map links open only if clicked. Providers receive data needed for their services. External resources may receive IP address and browser information. We currently load no advertising pixels or site analytics.
Some providers may process data outside the European Economic Area according to their own infrastructure and notices. Transfers under our responsibility require applicable legal safeguards; provider notices give more detail. Public posts may also be viewed outside the EEA.
Retention
Account details remain while the account is active and as needed to administer it. Published content stays in the archive while useful to the project or until a justified correction or removal request. Acceptance and licence records are kept as needed to establish permissions and handle claims; security data for security and disputes. Technical backups may persist for a limited restoration period. Legal obligations or disputes can require longer retention. You can ask for an assessment of deletion of your data.
Your rights
Depending on the circumstances you may request access, correction, deletion, restriction, portability or object. You may withdraw consent for processing based on it without affecting prior lawful processing. Write to the address above; you may also complain to the Italian Data Protection Authority.
Cookies
See the Cookie Policy for necessary session technologies, maps and the separate Street View preference.