Privacy Policy
How we protect your privacy
Last updated: February 28, 2026
Data Controller
Tag The Map is the data controller responsible for your personal data. If you have any questions about this privacy policy or our data practices, please contact us.
Data Collection and Usage
Tag The Map is committed to protecting your privacy. We collect and use data only as necessary to provide our service.
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal bases:
- Legitimate Interest: Essential cookies and session data required for the website to function securely.
- Consent: Analytics cookies and optional data collection are only activated after you provide explicit consent via our cookie banner or Cookie Settings page.
- Contractual Necessity: Account data (email, display name) is processed to provide the service when you register an account.
Cookies and Analytics
We use cookies to enhance your browsing experience and provide analytics. Essential cookies are required for the website to function properly, while analytics cookies (including Google Analytics) help us understand how our service is used and improve user experience. Analytics cookies are only loaded after you provide explicit consent. You can control your cookie preferences through our cookie banner, by visiting our Cookie Settings page, or by modifying your browser settings. You may withdraw your consent at any time, and analytics cookies will be actively deleted from your browser.
Types of Cookies We Use:
- Essential Cookies: Required for basic website functionality, such as session management and security features.
- Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous information. Only set after you provide explicit consent.
- Third-party Cookies: Used by services like Google Analytics, Cloudflare, and OpenStreetMap for performance and analytics.
For full details about the cookies we use, including their names, purposes, and expiration, please see our Cookie Policy.
Third-Party Services
Our application uses Cloudflare for security and performance optimization, OpenStreetMap for map data, and Leaflet for interactive map functionality. These services may collect technical information such as IP addresses and browser details as part of their standard operations.
International Data Transfers
If you consent to analytics cookies, data may be transferred to Google servers, which may be located outside of your country of residence. We configure Google Analytics with IP anonymisation enabled and with Google Signals and advertising features disabled to minimise the data transferred.
Data Sharing Policy
We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy.
Personal Data Retention
Your personal data is retained only for as long as necessary to provide the service and fulfill the purposes outlined in this policy. Session data and participant information are typically retained for the duration of active sessions and may be deleted afterward. Cookie consent preferences are stored for up to 12 months, after which you will be asked to renew your preferences.
Participant Anonymity
Participants in sessions are anonymous except for the display name they choose to use. We recommend using initials or aliases to maintain privacy. No personal identifying information is required to participate in sessions.
Account Registration
Account registration is only required for hosting your own sessions. Participants can join sessions without creating an account. Optional account creation allows participants to maintain access to their session history and review results.
Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request that we delete your personal data (the "right to be forgotten").
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Data Portability: You can request to receive your data in a structured, commonly used format.
- Right to Object: You can object to the processing of your personal data.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time via our Cookie Settings page.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority in your country of residence.
To exercise any of these rights, please contact us.