Map the Block › Privacy
Privacy Policy
Map the Block collects as little as possible. There are no ads, no tracking or advertising cookies, no analytics services, and we never sell or rent your information. Browsing the map needs no account.
Last updated . Operated by Phulax LLC (“we”). Questions: maptheblock@gmail.com.
What do we collect if you just browse?
Our web server keeps standard access logs (IP address, page requested, browser type, time) to keep the site running and secure. Logs are deleted after 14 days. Rate limits that protect sign-in use your IP address in memory only and never write it to disk.
The map loads map images, tiles and software from these providers, which receive your IP address the same way any website you visit does: OpenFreeMap (street map), the U.S. Geological Survey National Map (satellite imagery), Amazon Web Services (elevation data) and unpkg.com (the map software).
What do we collect if you make an account?
| Information | Why | Kept |
|---|---|---|
| Email address and name | To sign you in and identify your account | Until you delete your account |
| Mobile number | To confirm sign-up and password resets by text message (sent through our SMS provider, iBlueText) | Until you delete your account; our text log stores only a scrambled (hashed) form of the number |
| Password | Sign-in. Stored only as a one-way scrypt hash; nobody can read it | Until you change it or delete your account |
Sign-in cookie (mtb_s) | Keeps you signed in. It is the only cookie we set and is strictly necessary | 30 days (12 hours for admins), or until you log out |
What about the Icon Wars game?
If you play, we keep your pilot settings (chosen icon, colours, call sign), scores, and counts of which icon types you blew up. Leaderboards show your call sign only if you choose to show it and we approve it; otherwise they show “Pilot” and a number.
Photos you upload are shrunk to 128 × 128 pixels and stripped of hidden data such as camera and location details. Other players see your photo or call sign only after an administrator approves it. Share cards you create are public images at their link until we remove them (we keep your newest five, for up to 180 days).
What about donations?
Donations are processed by Stripe; we never see or store your card details. When you donate while signed in, your donation link carries a private code so we can mark your pilot as a supporter. From each donation we keep only “supporter” and the date, not the amount or payment details. Stripe's own privacy policy covers your payment. Donations go to Phulax LLC and are not tax-deductible.
What about feedback?
The feedback form stores your rating and message. Your name and email are optional and used only to reply to you. Feedback stores no IP address.
Who do we share information with?
Only the service providers named above (SMS provider, Stripe, and our hosting company, which runs the server), only to provide the service, or if the law requires it. We don't sell or share personal information for advertising.
How do I delete my information?
Signed in, open Your account and choose Delete my account. That removes your account and sign-in sessions. To have your game data, photos or share cards removed as well, or for any other request (access, correction, deletion), email maptheblock@gmail.com and we'll answer within 30 days.
What about the neighborhood data on the map?
The map shows public records as published by government and other open sources, mostly as area totals. We do not map individual people: no person-level crime, health, voter or registry records, and no individual homeless camp, shelter or domestic-violence shelter locations.
Children
Map the Block is not directed to children under 13, and we don't knowingly collect their information. If you believe a child has made an account, email us and we'll delete it.
Security
The site uses HTTPS everywhere, secure sign-in cookies, hashed passwords, rate limits and a strict content security policy. No system is perfect; if you find a problem, please email us.
Changes
If we change this policy we'll update the date at the top, and for significant changes we'll note it on the home page.