Privacy policy

1. Operator and contact

Operator: MissaMap, an individually operated project

Privacy, correction and deletion requests: [email protected]

The operator's personal email and home address are not published; use the dedicated contact address above.

2. Information we process

• Google-provided identifier, email, display name and verification state when you choose Google sign-in
• Account display name, sessions and security state, saved churches, confirmations and contributions
• Processed WebP place-photo derivatives, rights attestations and moderation/report records for photos you submit. Administrators may review private pilgrimage photos for safety, rights, privacy and legal-request checks.
• PDF or image originals, or analysis copies, attached to a bulletin submission. They may be retained in protected WordPress uploads for review and are not served as public static files.
• Information you include in a message and operational records needed for security and reliability
• Visitor and usage information collected through Google Analytics 4: pages and screens viewed, visit time, referral source, browser and device information, language, approximate location and site interactions. Google Analytics may use first-party analytics cookies to distinguish users and sessions

3. Purposes

• Authentication, account operation, saved places and community contributions
• Data quality, abuse prevention and photo reports
• Photo safety, rights and privacy review, including necessary removal, regardless of public visibility
• Analyze visitor and usage statistics and performance to improve search, maps and the service
• Security, troubleshooting, service operation and legal obligations

4. Retention and deletion

Account information is retained until you delete the account. Deletion removes the WordPress account, Google links, saved places, confirmations, photo reports and your identifying profile values. Operational history may retain a non-identifying null actor reference so the underlying place and service history remains intact.

MissaMap does not retain place-photo upload originals; it stores processed derivatives. Bulletin attachments may be retained in protected WordPress uploads while analysis or review is needed and are not directly public. Sign-in is maintained with WordPress authentication cookies, which expire according to the browser and login settings and are cleared on logout or account deletion.

Google retains Analytics data according to the connected Google Analytics property retention settings. MissaMap does not separately store raw Analytics event data in its WordPress database.

5. Providers and international processing

• Hosting, database, processed photo storage and image transformation infrastructure
• Google for the Google sign-in flow you choose, Google Analytics 4 visitor and usage measurement, and tag delivery through Google Tag Manager
• Map tile and map-library providers for browser map display
• When bulletin analysis is enabled, an external AI/OCR provider may receive a submitted file or extracted text as part of the analysis request.
• Analytics is used for standard visitor measurement, not advertising or remarketing. MissaMap does not send account emails, passwords, TOTP secrets or raw form input as Analytics event parameters; however, a page URL and search terms placed in a URL may be sent as part of page-view data, so do not enter personal information in search terms.

6. Your choices

You can change your display name and delete your account from the account page. Contact [email protected] to request correction of the login email or Google identity, access to information, restriction or other privacy help. You can also limit Analytics measurement through browser cookie blocking or tracking-prevention controls.

7. Cookies and location

The service uses an HttpOnly, SameSite authentication cookie and a first-party cookie to remember your language choice. Google Analytics 4 may set `_ga` and related first-party analytics cookies to distinguish users and sessions. The approximate location collected by Analytics is different from precise location obtained through browser permission. Location is used for a map search only when you explicitly grant browser location permission and is not stored as account data.

8. Children

Where parental consent or guidance is required for a person under 14, it must be obtained before submitting personal information or photos. If you believe this has not happened, contact [email protected].

9. Changes

Effective/last updated: 2026-09-06

We may update this policy as the service or applicable requirements change; the current version is posted on this page.