Privacy in practice

A technical, non-legal map of data flows. For contractual language, read the Privacy Policy. This page exists so privacy claims stay inspectable.

Honest summary: guest convert/validate/repair and local editing do not upload your GeoJSON file to GeoJSON Cloud servers. Creating an account, saving projects, public share/embed, payments, analytics, basemap tiles, geocoding, and optional remote URL import do use the network.

Guest tools & local editor work

Stays local / client

  • File parse and format conversion in the browser
  • Validate / repair GeoJSON
  • Draw and edit features on the map (client-side store)
  • Download converted results to your device

Leaves the browser

  • Map tiles from OpenStreetMap tile servers (viewport requests, not your GeoJSON file upload)
  • Optional geocoding queries to Nominatim when you search for a place
  • Anonymous product analytics events if analytics is enabled (no file contents)

Remote URL open (editor)

Stays local / client

  • Parsed geometry after download

Leaves the browser

  • Your browser requests the HTTPS URL you entered (raw GitHub/Gist restricted server-side)
  • The import-url API fetches allowed hosts and returns GeoJSON to the client

Signed-in cloud projects

Stays local / client

  • Editor draft until you save

Leaves the browser

  • Project name, GeoJSON payload, public flag, and version snapshots stored in Supabase
  • Usage counters (e.g. monthly conversions) and auth session cookies
  • Share/embed views load stored public projects for anyone with the link

Billing

Leaves the browser

  • Stripe handles payment details; we store subscription tier and customer references, not full card numbers

Share links & deletion

  • Public projects are readable by anyone with the URL until you make them private or delete them.
  • Free public maps may show a GeoJSON Cloud credit; Pro can share without that free-plan credit. Export files are not watermarked.
  • Account deletion and retention windows are described in the Privacy Policy (including the 30-day deletion target after account deletion, subject to legal holds).
  • You can export project GeoJSON from the product while your account is active.

Related