Privacy Policy
Last updated:
This Privacy Policy explains what data GZW Tac Map (“we”) processes when you use https://gzwtacmap.com/.
Information We Process
We collect only the minimum data required to operate the service.
Account Information (optional login)
When signing in via Google or Discord through Supabase authentication we receive:
- Unique user identifier
- Display name / username
- Avatar URL
- Email address (if provided by the provider)
Authentication Session
Secure authentication cookies are required to keep you logged in and verify your session between requests. These cookies are strictly necessary and cannot be disabled while using authenticated features.
Application Usage Data
To provide functionality we store interaction data that is not linked to your real-world identity:
- Visited map objects
- Search queries inside the site
- Saved progress and enabled layers
- User interface preferences
This information is used only to make features work correctly and improve usability. We do not perform behavioral profiling or targeted advertising.
Analytics
We use SimpleAnalytics to understand overall traffic and usage patterns. The analytics system is privacy-focused and does not use cross-site tracking cookies or advertising identifiers.
Cookies & Local Storage
The website uses functional storage only:
- Authentication session cookies
- Map preferences and UI settings
- Saved progress
These are required for the service to operate and are not used for advertising tracking.
Legal Basis (GDPR Art. 6)
- Contract performance: account login and core features
- Legitimate interest: stability, debugging and usability improvements
- Legal obligation: compliance with applicable laws
Data Sharing (Processors)
We use third-party processors necessary to operate the Service:
- Supabase — authentication and database
- Vercel — hosting and server execution
- Cloudflare — CDN and security protection
- SimpleAnalytics — aggregated analytics
These providers process data only on our behalf and under their respective privacy terms. We do not sell or rent personal data.
International Transfers
Your data may be processed on servers located outside your country by our infrastructure providers. We rely on safeguards provided by these services for international data transfers.
Data Retention
- Account data: stored while the account exists
- Usage data: stored while necessary to provide features or until account deletion
You may request deletion at any time.
Your Rights
You may request:
- Access to your data
- Correction of inaccurate data
- Deletion of your account and associated data
- Objection to processing based on legitimate interests (where applicable)
Children
Our site is not directed toward individuals under 13. We do not knowingly collect personal information from individuals under 13.
Changes to this Privacy Policy
We may update this policy when the Service changes. Continued use of the Service after updates means acceptance of the revised policy.