Privacy

Using the map without an account

Marking cities, removing them, zooming and searching require no account and create no record on our side. The cities you mark live in the address bar — that string in the URL is your map. Nothing is sent to us.

We also keep a copy of that same string in your browser's local storage, so your map survives leaving this page and coming back. It holds nothing but city numbers and whether each one is somewhere you've been or somewhere you want to go: no identifier, no date, nothing that says who you are. It stays on your device, and clearing your browser's site data removes it. We do not ask for consent for this one, because keeping the work you just did is part of the thing you asked us to do — not something extra we do on the side.

The city list and the map tiles are static files. Search runs entirely in your browser: what you type is never sent anywhere.

Cloudflare, which serves the site, may set a technical cookie of its own (such as __cf_bm) to tell people from abusive bots apart. It is strictly functional, short-lived, and used for nothing else.

1 · Account

What

Email address and a display name.

Why

To save your map and give it a permanent address. Nothing else.

Legal basis

Performance of a contract — you asked us to keep your map.

Where

Supabase, Frankfurt region (EU).

Emails

Confirmation and password-reset emails are delivered by Resend (EU region). They receive your address for delivery and nothing else.

Deletion

Deleting your account deletes your maps.

Signing in with Google passes us your email address and name from them. We do not receive anything else, and we do not ask them for anything else.

2 · Advertising

Where advertising runs, personalised advertising requires your consent, collected through a consent management platform. If you decline, no advertising script is loaded at all — not a blank slot, not a non-personalised fallback: nothing.

Note the distinction, because it is easy to blur: we do not sell or share your data, but ad vendors process data of their own when advertising runs. Those are two different statements, and only the first is a promise we can make on our own.

What we do with the aggregate

Counts of how many people marked a city are used for our own product: statistics, rankings, and the city pages on this site. They are not sold or handed to third parties. That is a narrow statement on purpose — there is no "and related purposes" here, because that phrase is what makes a privacy notice unenforceable.

A count appears publicly only once enough different people have marked the same place. Below that threshold the number is not shown, not indexed and not ranked — with small counts, cross-referencing an aggregate against public maps can point back at one person.

Analytics

We use Umami (cloud service, EU region) to count visits and a handful of product events — how many people sign up, how many share a map. It sets no cookie, stores nothing on your device, and builds no profile of you: what we see are aggregate numbers, not people. That is why there is no banner asking about it: there is nothing to consent to.

Your rights

Access, correction, deletion, portability, objection, and withdrawal of any consent you have given. Withdrawing consent for one treatment does not affect the others.

Deletion doesn't require writing to us: it's the Delete account button in your account screen, and it removes the account and the map together. For everything else, write to privacy@travelerwall.com.

The legal version

This page is written to be read. The formal, multi-jurisdiction version — kept up to date for the GDPR, UK GDPR, US state laws, LGPD and the Swiss FADP — lives here: Privacy Policy · Cookie Policy. If the two ever disagree, the formal version prevails.