OCULUS SANCTI

The short version

We collect the minimum needed to run your account and keep the app safe: your sign-in email, a log of your own sessions and searches (visible only to you and, in aggregate, to us for safety review), whatever you submit through Report a Bug, and any optional API key you choose to connect. We don't run ad trackers or analytics, we don't sell your information to anyone, and you can delete your account and everything tied to it at any time from Account → Settings.

Information we collect

Account information

Your email and password, handled by our authentication provider, Supabase. We never see or store your raw password — Supabase stores it in salted, hashed form.

Activity log

Your sign-ins (with the purpose you stated — personal, business, journalism, etc.) and the locations you search are logged internally so you can see your own activity in My Activity, and so a simple, rule-based pattern check can catch the one real misuse case a tool like this creates (someone using search to fixate on a single address). This is explained in full, including exactly what the check looks at and what it never does, in the Guide's Privacy & Safety section. This log is never published and never sold.

Bug reports

If you use Report a Bug, we collect the message you write plus automatically-captured context (your current view/share-state, viewport size, browser user agent) so the report is debuggable without a follow-up question.

Disclosed check-in replies

If your account is ever flagged by the activity check above, your reply to that check-in is logged verbatim and read by a person — never scored or judged by an automated system.

API keys you connect

Account → Settings lets you optionally connect your own key for certain data sources (Google Maps, Mapbox, TomTom, and others). We store what you enter so we can use it on your behalf when you use that feature; three of these (Google Maps, Cesium ion, Mapbox) run partly in your own browser since they render the map itself, the rest stay server-side only and are never sent to your browser.

Automatically collected technical data

Our infrastructure providers (see below) log standard technical data as part of operating the site — IP address, request timing, and similar server-log data typical of any website. We don't separately collect or analyze this ourselves.

What we don't do

• No advertising trackers or third-party analytics of any kind.
• No selling, renting, or sharing your personal information with third parties for their own marketing.
• No face recognition, license-plate reading, or named-person search anywhere in this app.
• No camera or sensor feed here that its own operator didn't choose to make public — see the Terms for what "consent-published" means and the rules around it.

Who we share information with

These are the services that process data on our behalf to make the app work — none of them get to use it for their own purposes:

• Supabase — authentication and database hosting for your account, activity log, and connected keys.
• Cloudflare — content delivery, security, and bot verification (Turnstile) for the site.
• OpenAI — only if you use the voice control feature: your spoken audio is streamed directly to OpenAI's Realtime API for that live session. We don't record or store it ourselves.
• The public/free data sources listed in DATA_SOURCES.md — these send public map data to the app; they don't receive any personal information about you.

Cookies & local storage

This app's own code does not set cookies. It uses your browser's local storage to keep you signed in and to remember a couple of preferences (like your last-picked purpose at sign-in) — this data stays on your device and is never sent to us as a "cookie." Cloudflare may set its own security/bot-detection cookies as part of protecting the site from abuse; those are governed by Cloudflare's own privacy policy.

How long we keep information

We keep your account data for as long as your account exists. If we revoke an account for violating the Terms, its activity history is preserved rather than deleted (so the record of why it was revoked survives) — but the account itself is disabled, not usable. If you delete your account, everything tied to it is deleted immediately and permanently, described next.

Your rights and choices

• See your own activity anytime via My Activity.
• Delete your account anytime via Account → Settings → Delete Account — this permanently deletes your account, connected keys, activity history, and bug reports. This cannot be undone and isn't something we can reverse for you afterward.
• EU/UK residents (GDPR) — you additionally have the right to access, correct, restrict, or object to our processing of your data, and to receive a copy of it in a portable format. Contact us below for anything not already self-service above.
• California residents (CCPA/CPRA) — you have the right to know what personal information we hold, request its deletion, and correct it. We do not sell or share personal information as those laws define it, so there is no opt-out needed for that.

Children's privacy

Oculus Sancti is not directed at children and requires you to confirm you're at least 13 years old to create an account. We don't knowingly collect personal information from anyone under 13; if we learn an account belongs to a child under 13, we'll delete it.

Security

We use reasonable technical measures to protect your information — encrypted connections, access controls scoping every user's data to their own account, and rate-limiting against abuse. No online service can guarantee perfect security, and we can't promise one either.

International users

This app is operated from the United States, and our infrastructure providers (Supabase, Cloudflare) process data in facilities that may be located in the US or other countries where they operate. By using this app, you understand your information may be processed outside your own country.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date below. Continuing to use the app after a change means you accept the updated policy.

Contact

Questions, privacy requests, or anything else about this policy: [email protected]