Privacy Policy

This Privacy Policy describes how MapTurtle, LLC (“MapTurtle,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use the MapTurtle website, mobile applications, and related services (collectively, the “Platform”).

By using the Platform, you agree to the practices described here and to our Terms of Service. If you do not agree, please do not use the Platform.

We use the information described above to:

• —Create, operate, and secure your account, including signing you in and recovering forgotten passwords.
• —Provide, maintain, and improve the Platform's features.
• —Display your public profile to other users when you choose a username that is reachable at /user/{your-username}.
• —Respond to your support requests and other communications.
• —Send transactional emails — for example, email-address verification, password reset, and email-change confirmations. These are not optional while you have an active account.
• —Send product updates and feature announcements only if you have opted in to marketing email.
• —Detect, investigate, and prevent abuse, fraud, security incidents, and violations of our Terms of Service.
• —Comply with legal obligations and enforce our agreements.
• —Produce aggregate, de-identified analytics about how the Platform is used.

We do not use your personal information to make automated decisions that have legal or similarly significant effects on you.

We use a small number of first-party cookies that are strictly necessary to operate the Platform:

• —Session cookie — set by our authentication provider when you sign in; it identifies your browser to our servers so you remain signed in between page loads. It is cleared when you sign out or when the session expires.
• —Preference cookies — used to remember small interface preferences such as filters you have applied. These are functional cookies and contain no personal identifiers.

We do not currently use analytics cookies, advertising cookies, or cross-site tracking technologies. You can configure your browser to refuse all cookies, but signing in to your MapTurtle account will not work without the session cookie.

We rely on a small number of vendors to run the Platform. Each is bound by a written agreement to process your information only on our behalf and only for the purposes described here.

• —Supabase, Inc. — database, authentication, and user-uploaded file storage (avatars). Supabase holds your account record, your password hash, and your profile data.
• —Vercel Inc. — application hosting, edge network, and request logging. Vercel processes the technical request data described in Section 2.2.
• —Cloudflare, Inc. — image and static-asset delivery for some Platform content. Cloudflare receives request metadata but does not receive account credentials.
• —Email delivery providers — used to send verification, password-reset, and (if you opted in) product emails. These providers receive your email address, your username, and the email body.
• —Map tile providers— your browser loads aviation sectional charts from the FAA’s ArcGIS service and street maps from OpenStreetMap. These third parties may log the standard request metadata (IP, user agent, tile coordinates) in accordance with their own policies.

We do not sell, rent, or trade your personal information to any third party for their own marketing purposes.

We share personal information only in these circumstances:

• —With your direction. Your username, display name, biography, avatar, and tail number (if you provided one) are visible on your public profile page at /user/{username} once your account exists. You can remove any of these fields at any time from Edit Profile.
• —With our service providers. See Section 5.
• —For legal reasons. If we receive a valid subpoena, court order, or other legal request, or if we believe disclosure is necessary to protect rights, property, or safety, we may share information as required by law.
• —Business transfers. If MapTurtle is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you (e.g. by email or a banner on the Platform) before your information becomes subject to a different privacy policy.
• —Aggregate and de-identified data. We may share aggregate or de-identified statistics — for example, total signups per month — that cannot reasonably be used to identify you.

We keep your personal information for as long as your account is active, plus a short period to recover from accidental deletion and to satisfy legal, accounting, or reporting requirements.

• —Account data is retained until you delete your account. After deletion, your authentication record, profile, avatar, and any session data are permanently removed within 30 days, except where we are required by law to retain specific records.
• —Server logs (IP, user agent, request paths) are retained for up to 90 days for security and abuse prevention.
• —Support emails are retained for up to two years so we can reference prior conversations if you reach out again.

We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS) for all traffic, one-way password hashing, role-based access controls inside our database, and least-privilege access for our team. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

If we become aware of a security incident that affects your personal information, we will notify you in accordance with applicable law.

If you believe a child under 13 has provided us with personal information, please contact us at privacy@mapturtle.com and we will delete the information promptly.

You can exercise the following rights at any time:

• —Access and review — see your account email, profile fields, and avatar from Account Settings.
• —Edit — update your username, display name, biography, tail number, avatar, email address, or password from Account Settings.
• —Opt out of marketing email — toggle off the marketing-email preference, or use the unsubscribe link in any marketing email we send. Transactional emails (verification, password reset, security alerts) cannot be disabled while you have an active account.
• —Sign out of all devices — revoke all active sessions from Account Settings.
• —Delete your account — permanently remove your account, profile, avatar, and session data from Account Settings → Delete Account.
• —Request a copy of your data — email privacy@mapturtle.com and we will provide a machine-readable export within 30 days.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), gives you additional rights regarding the personal information we collect about you:

• —Right to know what personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
• —Right to delete personal information we have collected from you, subject to certain exceptions.
• —Right to correct inaccurate personal information we maintain about you.
• —Right to opt out of sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioral advertising. There is therefore nothing to opt out of, but you retain this right if our practices ever change.
• —Right to non-discrimination for exercising any of these rights — we will not deny service, charge different prices, or reduce service quality.

To exercise any of these rights, use the self-service controls in Account Settings or email privacy@mapturtle.com. We may need to verify your identity (typically by confirming access to the email address on your account) before completing a request.

MapTurtle is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to, stored in, and processed in the United States and other countries where our service providers operate. By using the Platform, you consent to this transfer.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the legal basis for processing your personal information is either (a) your consent, (b) the performance of a contract with you (the Terms of Service), or (c) our legitimate interest in operating and securing the Platform, balanced against your rights.

We may update this Privacy Policy from time to time. If we make material changes, we will revise the “Effective” date at the top of this page and notify you by email or with a banner on the Platform before the changes take effect.

Your continued use of the Platform after a revised policy becomes effective constitutes your acceptance of the revised policy. If you do not agree, you may delete your account from Account Settings.

If you have questions about this Privacy Policy, want to exercise any of the rights described above, or believe your information has been mishandled, please contact us:

• —Email: privacy@mapturtle.com
• —Address: MapTurtle, LLC · 1922 Contra Costa Blvd. · Pleasant Hill, CA 94523

This Privacy Policy was last updated on May 22, 2026. MapTurtle is not a law firm and this document does not constitute legal advice. You are encouraged to consult qualified legal counsel regarding your specific situation.