Visitors
- No accounts and no cookies. Persona and saved places are kept in your browser's local storage; clear it and they are gone.
- Location is read only when you tap Locate or Near me, stays on the device, and is never written into a URL, an analytics event or an API request.
- Analytics are cookieless aggregate counts via Vercel Analytics. Nothing identifies you.
- Directions links open Apple Maps, Google Maps or Citymapper with the place's public point only; those apps have their own policies.
Places
- Hacker houses and residential addresses are published at neighbourhood level, never the door, unless the occupant publishes the address itself and opts in.
- An exact address needs a first-party, press or public-domain source. Business-registry rows justify block precision only.
- No people data: no names of residents or employees beyond what an organisation says about itself on its own site.
- Opt-outs are honoured within 72 hours via /legal/remove.
Developers
The public API and MCP server keep salted hashes of IP plus client name for 30 days to rate-limit abuse, and daily call counts per route. Nothing else is logged about a request.
SF Tech Map · hello@sftechmap.app