Privacy policy

What Footprint stores

• Your email address, to send you sign-in codes.
• Your atlas: the places, legs and trips you add, with their dates, depths, companions, life stages and notes.
• Your settings: kilometers or miles, and where you are in the first-run interview.
• The suggestions you dismissed, so they stay hidden.
• The number of chat messages you send each day, to apply the limit of 100 a day.
• Your sign-in sessions, each with the IP address and the browser it came from.

Footprint keeps all of it in a Neon Postgres database in Frankfurt, Germany. No other user can see your atlas.

Who else receives data

• Neon hosts the database and the sign-in service, in Frankfurt.
• Vercel hosts Footprint, so it receives every request your browser sends to it. Vercel Web Analytics counts page visits.
• Vercel AI Gateway passes your chat messages to Anthropic’s Claude model. It receives the text you send in the chat and in the interview. A request to change entries also sends up to 20 entries that match it, with their notes and the names of your companions. A “This looks wrong” check sends the entry you flagged. The model never receives your whole atlas.
• Resend sends the email with your sign-in code, so it receives your email address.
• OpenFreeMap serves the map to your browser, so it receives your IP address and the parts of the map you look at.
• Nominatim, the place search of OpenStreetMap, receives the names of places that Footprint does not know yet.
• The OpenStreetMap road router that FOSSGIS runs receives the coordinates of the two ends of each drive, bus and train.
• When you use Dictate, your browser sends the audio to its maker’s speech service, such as Google for Chrome. Footprint receives only the words.

Nominatim and the road router receive no email address, user ID or date with a request. Vercel, Anthropic and Resend are companies in the United States.

Ads and sales

Footprint shows no ads and does not sell your data.

Cookies

Footprint sets cookies only to keep you signed in. Your choice of light or dark mode stays in your browser’s storage.

Export and delete

Open Settings from the account menu. “Export your atlas” downloads every place, leg and trip as one atlas.json file. “Delete account” deletes your account, your whole atlas, your sessions and your message count from the database at once. The database host keeps a short recovery history, and the deleted data leaves it when that history expires.

Your rights

• Export your atlas and delete your account yourself, in Settings.
• For a copy of your data, a correction or any other request about your data, write to hello@otterlake.co.
• You can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Changes and contact

When this policy changes, the date at the top changes with it. Write to hello@otterlake.co with any question about your data.