Privacy policy

What happens to your data when you use Mapholm: what we collect, why, who helps us run the site, and what you can ask of us. Last updated 23 October 2026.

Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Fabian Kampe
Sodtkestr. 34
10409 Berlin
Germany
fabian@tailoryourtrips.com

For anything about your data, write to that address.

In short

• You can use the site and the editor without an account. Worlds you make without one stay in your browser and never reach us.
• If you sign in, we store your account details and the worlds you save to your account, so you can use them on other devices and share them.
• We count page views and a few actions (such as "a world was created" or "a map was downloaded") to see what's used. This doesn't use cookies, doesn't store anything on your device and doesn't identify you.
• We don't sell your data, show ads or use tracking for advertising.

Hosting

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends data that Vercel's servers process and briefly keep in logs to deliver the page and keep the service secure: your IP address, the date and time, the page asked for, the referring page, and your browser and operating system.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is a site that loads reliably and is protected from abuse. We have a data processing agreement with Vercel. More in Vercel's privacy policy.

Usage statistics

We use Vercel Web Analytics to count page views and these actions:

• following a link from our pages into the editor
• creating, importing, deleting or moving a world, and opening an example
• running a generator, opening the 3D view, restoring an earlier version
• downloading a map or exporting a world, changing who can see a world, copying its link, and viewing a shared world
• clicking sign in and finishing signing in
• a failed import, or a page that failed to load

For each one we record the kind of page it happened on and a few fixed values (such as the download format, or which generator ran), never the names or contents of your worlds. Vercel also records the page address, the referring site, your country, and your browser, operating system and device type.

Web Analytics uses no cookies and stores nothing on your device. To tell visits apart, it uses a value derived from your request that changes every day, so you can't be recognised from one day to the next or across sites. Your IP address isn't stored.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is learning which parts of the site are used, to improve them. You can object at any time (see Your rights); blocking the analytics script in your browser works too.

Using the editor without an account

Worlds you make without signing in, and any map image you trace over, are saved in your browser's storage on your device (IndexedDB). They aren't sent to us. Your browser may clear them, and you can delete them yourself in the editor or by clearing the site's data in your browser.

Your account

Sign-in is provided by Clerk, Inc. (USA). When you create an account, Clerk processes your email address, the name and profile picture you give (or that the provider shares, if you sign in with an account such as Google), and, to keep accounts secure, data about your sign-ins such as IP address, browser and time. Clerk sets cookies that are needed to keep you signed in.

Legal basis: Art. 6 (1) (b) GDPR, as this is needed to provide the account you ask for. Setting the sign-in cookies is strictly necessary for that service (§ 25 (2) no. 2 TDDDG). We have a data processing agreement with Clerk. More in Clerk's privacy policy.

Worlds in your account

Worlds you save to your account are stored in our database, run by Neon (Databricks, Inc.) in Frankfurt, Germany, along with the last five earlier versions of each. Map images you trace over are stored with Cloudflare, Inc. (R2 storage). We use these to save and show your worlds, and to keep each account to a fair number of requests.

If you share a world, anyone with its link (or, if you make it public, anyone) can see it as a 3D world and 2D map, with its name and everything you put in it. The map image you traced over is never shared. Making a world private turns its link off straight away.

Legal basis: Art. 6 (1) (b) GDPR. We keep your worlds until you delete them. To delete your account and everything in it, write to us. More in Neon's privacy policy and Cloudflare's privacy policy.

Stored in your browser

Besides the worlds above and the sign-in cookies, the site keeps a few settings in your browser (localStorage), only for features you use: whether you've seen the note about saving in the browser, whether you've answered the offer to move your worlds into your account, night mode, and your reading progress on the book maps. These never leave your device (§ 25 (2) no. 2 TDDDG).

Emailing us

If you write to us, we use your email address and what you write to answer you, and delete them once the matter is settled unless the law requires us to keep them. Legal basis: Art. 6 (1) (b) GDPR if it's about using the site, otherwise Art. 6 (1) (f) GDPR (our interest in answering you).

Transfers outside the EU

Vercel, Clerk and Cloudflare are based in the USA and may process data there. Where a provider is certified under the EU-U.S. Data Privacy Framework, the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR); otherwise it's based on the Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• have it corrected (Art. 16) or deleted (Art. 17)
• have its processing restricted (Art. 18)
• receive it in a portable format (Art. 20). You can export any world as a file yourself, from the editor
• object to processing based on our legitimate interests, on grounds relating to your situation (Art. 21)
• withdraw any consent you've given, with effect for the future (Art. 7 (3))

To use them, write to the address above. You also have the right to complain to a data protection authority, for example the one responsible for us: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

You don't have to give us any data to use the site; without an account you just can't save worlds to one. We don't make automated decisions about you.

Changes

We'll update this policy when the site or the law changes. The date at the top says when it last changed.