1. Introduction
Local Mapr ("we," "us," or "our") operates the website at localmapr.projectoutcast.com (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our free, browser-based Google Maps scraping tool.
By using Local Mapr, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
Local Mapr is designed with privacy in mind. We collect minimal data:
2.1 Automatically Collected Data
When you visit our website, we may automatically collect:
- Anonymous usage analytics (pages visited, feature usage, session duration) via Google Analytics
- General device information (browser type, operating system, screen resolution)
- Approximate geographic region (country/city level, derived from IP address)
This data is collected in aggregate and cannot be used to personally identify you.
2.2 Information We Do NOT Collect
We want to be explicit about what we do not collect or store on our servers:
- Google API keys — Your API key is never transmitted to or stored on our servers
- Scraped business data — The data you extract from Google Maps is processed temporarily and auto-deleted within 2 hours
- Personal account information — We do not require registration, so we collect no names, emails, or passwords
- Payment information — Local Mapr is free; we do not process any payments
3. How Your API Key Is Handled
Your Google Places API key is handled entirely on the client side:
- If you choose "Remember API key," it is stored in your browser's localStorage — a storage mechanism on your own device, not on our servers
- When you run a scrape, your API key is sent from your browser to our server solely to make requests to Google's Places API on your behalf. It is held in server memory only for the duration of the scraping job and is never written to disk or any database
- We do not log, store, or share your API key
- You can remove your stored API key at any time by unchecking "Remember API key" or clearing your browser's local storage
4. Temporary Scraped Data
When you run a scrape, the resulting data files (CSV/Excel) are stored temporarily on our server so you can download them. These files:
- Are automatically deleted within 2 hours of creation
- Are associated with a random job ID, not with any personal identifier
- Are not backed up or archived
- Are not accessible to other users
5. Cookies and Tracking Technologies
5.1 Cookies We Use
- CSRF Token — A security cookie used to protect against cross-site request forgery attacks. This is a functional cookie essential for the tool to operate securely. It expires after 1 hour.
- Google Analytics — We use Google Analytics to understand how visitors use our site. Google Analytics uses cookies to collect anonymous usage data. You can opt out by using the Google Analytics Opt-out Browser Add-on.
5.2 Local Storage
We use your browser's localStorage (not cookies) to optionally store:
- Your API key (only if you check "Remember API key")
- UI preferences (such as whether the setup guide is hidden)
localStorage data never leaves your device and is not accessible to us.
6. Third-Party Services
Local Mapr integrates with or relies on the following third-party services:
- Google Places API & Geocoding API — Used to retrieve business data from Google Maps. All API requests are made using your own API key and are subject to Google Maps Platform Terms of Service. Google's own privacy policy applies to data processed by their APIs.
- Google Analytics — Used for anonymous website usage analytics. Subject to Google's Privacy Policy.
- Railway — Our hosting provider. Subject to their own privacy and security policies.
- OpenStreetMap — Map tiles used for the interactive results map. Subject to OpenStreetMap Foundation's Privacy Policy.
We do not sell, rent, or share any data with third parties for advertising or marketing purposes.
7. Data Retention
- Scraped data files: Automatically deleted within 2 hours
- Server logs: Retained by our hosting provider per their standard policies
- Analytics data: Retained per Google Analytics default settings (26 months), in anonymized/aggregate form
- localStorage data: Persists on your device until you clear it manually
8. Your Rights
8.1 For EEA/UK Residents (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access any personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Lodge a complaint with your local data protection authority
Since Local Mapr collects minimal data and does not require accounts, most of these rights are automatically satisfied. If you have concerns, contact us at the address below.
8.2 For California Residents (CCPA)
Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect
- Request deletion of your personal information
- Opt out of the sale of personal information
We do not sell personal information. As described above, we collect minimal anonymous analytics data and no personally identifiable information.
9. Data Security
We implement reasonable security measures to protect the Service, including:
- HTTPS encryption for all data in transit
- CSRF protection on all API endpoints
- Rate limiting to prevent abuse
- Content Security Policy headers to prevent XSS attacks
- Automatic deletion of temporary files
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.
10. Children's Privacy
Local Mapr is not intended for use by anyone under the age of 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, please contact us and we will take steps to remove it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
For material changes, we will make reasonable efforts to provide notice (such as a banner on the website).
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: leen@projectoutcast.com