Privacy, in three lines.

The short version below is binding: it is how we handle data today and throughout beta. The full Privacy Policy ships alongside paid launch (Phase 7 — covering Quebec Law 25, PIPEDA, GDPR, and the named third-party processors). It will expand on what's here, not contradict it.

• Pseudonymous by default. An email is the only required identity — burner addresses are first-class, no KYC ever. Reading the map requires no account; community alerts are submitted unsigned.
• Identity is opt-in. Nicknames, reputation tiers, and profile pages are opt-in features. Until you opt in, you stay anonymous.
• You stay in control of what you share.Favorites live in your car browser's local storage by default; you can opt to sync some of them to your profile if you want them across devices. Your current position and trips are never recorded on the server. An opt-in trip-history feature may land later, but it will never be a requirement.
• Telemetry is event-level, not location-level. Backend latency, UX score, GPS continuity. The privacy gate rejects forbidden fields (GPS coordinates, route polylines, destinations, addresses) at ingest, not after the fact.
• EU residency: Helsinki, Finland. All user data, alerts, feeds, and entitlement state on Hetzner Helsinki. GDPR coverage, out of reach of US data acts.
• Refuse non-justice-system data requests as policy.Marketing, advertiser, and partner inquiries to share user data are refused outright. We comply with court orders in the user's relevant jurisdiction only.
• No third-party trackers.Self-hosted Plausible only. No GA, no FB pixel, no cookie-consent banner because we don't set tracking cookies. No SSO upsell — magic-link auth only.
• We can't sell what we don't have.