Privacy Policy

Lovely Maps (lovely-maps.com) is an independent, one-person project run by Marek Wituszyński. This policy explains what data we collect when you use the site, why we collect it, and who it’s shared with.

• Account data. If you sign up, we store your email address and a securely hashed password via Supabase Auth. We never see or store your password in plain text.
• Generation data. Each time you generate a poster we record the city and country you searched, the theme and settings you picked, a job status, and a timestamp — so we can enforce the daily generation limits below and show you’re not abusing the free tier.
• IP address. Used to enforce the anonymous daily limit and to prevent abuse. Stored alongside your generation record.
• Device ID. A random identifier we generate and store in your browser’s local storage (not a cookie) so we can rate-limit fairly without penalizing people on shared Wi-Fi or mobile networks.
• Language preference. Saved in local storage so the site remembers whether you prefer English or Polish.

We don’t use analytics, advertising, or tracking cookies. If you sign in, Supabase sets a strictly-necessary session cookie so you stay logged in — that’s the only cookie on the site. Your device ID and language preference live in local storage, not cookies, and never leave your browser except as a rate-limit key sent with generation requests.

• MapToPoster — the rendering service that turns your city and settings into the actual poster image. It receives only the generation parameters, not your account details.
• Supabase (hosted in the EU, Frankfurt) — stores account and generation data described above.
• Upstash — stores short-lived rate-limit counters keyed by your IP, device ID, or user ID. No poster content or personal profile data passes through it.
• Zeccer (Poland only) — if you choose “Print & Deliver,” we hand Zeccer a link to your generated poster so they can print it. Any shipping and payment details you provide at that point go directly to Zeccer, not to us — see their own privacy policy for how they handle it.
• Vercel — hosts the website and, like any web host, processes standard server request logs.
• OpenStreetMap — the source of the underlying map data. No personal data of yours is sent to OpenStreetMap.

We keep account and generation data for as long as your account exists or as needed to enforce fair use and prevent abuse. Ask us to delete your account and associated data at any time — see Contact below.

You can ask us to access, correct, or delete your personal data at any time by emailing lovely-maps@marekw.io. We’ll handle requests as quickly as we reasonably can.

Lovely Maps is not directed at children under 16, and we don’t knowingly collect data from them.

If this policy changes in a meaningful way, we’ll update the date below. Continued use of the site after a change means you accept the update.

Questions about this policy or your data? Email lovely-maps@marekw.io.