Privacy Policy

PointOnEarth lets you claim a single geographic point and leave a short public message beside it. This page explains what we store and why.

When you claim a place we store the coordinates you selected, the owner name and message you typed, the resolved place name, region and country, your chosen language, and the identifier of your payment session.

Your email address is collected by our payment provider during checkout so it can send your receipt.

The owner name, message, coordinates and place description you submit are published on your permanent place page and on the globe. Do not submit anything you would not want to be publicly visible. Your email address and payment details are never published.

Payments are processed by Stripe. We never see or store your card details. Stripe acts as an independent controller for the payment data it collects.

Stripe may transfer data outside the EEA under the European Commission's standard contractual clauses. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing fraud (Art. 6(1)(f) GDPR).

Claimed places, moderation records and reports are stored in a managed Supabase (PostgreSQL) database hosted in the European Union, protected by row-level security policies. Application hosting and the content delivery network keep short-lived technical logs that may include your IP address and user agent for security purposes.

Your email address is entered directly in Stripe Checkout and is used only to send your purchase receipt and, if necessary, to contact you about your claim. We do not send marketing email and we do not sell or share your address.

We use essential browser storage to run checkout, protect the service from abuse and remember your cookie choice and language. Optional analytics are disabled unless you accept them in the cookie banner. See our Cookie Policy for details.

Names and messages are screened automatically before publication to block unlawful or abusive content, and may be reviewed by a human moderator following a report. We keep a record of moderation decisions and reports to prevent repeat abuse.

Satellite imagery, boundary and label tiles are requested from third-party map providers, and place names are resolved through the OpenStreetMap Nominatim service. These requests include your IP address and the coordinates being viewed.

A claimed place is intended to be permanent, so its public content is kept for as long as the service exists. Payment records are retained as required by accounting law.

Abuse-prevention and moderation records are kept for up to 24 months. Technical server logs are kept for up to 30 days.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and the right to withdraw consent at any time without affecting prior processing. You may also lodge a complaint with your national data protection authority.

To exercise a right, contact us using the details below. Note that deleting a claim releases the point so someone else can claim it, and purchases are not refunded on deletion.

For any privacy request, contact the operator of this site at the address published on the site. We respond to requests within one month.