Privacy Policy

Version 2026-11-08.1. This policy covers mapiron.com, the MapIron API (formerly PinSharing, including api.pinsharing.com) and the Pin Sharing app at pinsharing.com/pin, all operated by Wells Software Consulting LLC, doing business as MapIron ("we", "us").

What we collect

• Account: your email address, plan, and (for paid plans) the Stripe customer and subscription IDs. We never see or store card numbers; Stripe handles payment details.
• API keys: stored only as one-way hashes, with the name and website limits you set, and, for keys you manage through the keys API, the external id, caps and metadata you send. API tokens are stored as one-way hashes too.
• Usage per key: request counts per key by day and month, kept for 13 months.
• Webhooks: if you add one, we send usage and key events about your account to the URL you choose, and keep a delivery log for 30 days. What happens to that data at your URL is up to you.
• Usage counts: how many requests each account makes per product per month, used for caps, usage emails and billing.
• Product events: a record of account actions such as signing up, creating a key, the first API call, reaching a usage threshold and checking out, used to improve the product. Clicks on our website's buttons are counted in our own records without cookies, IP addresses or any identifier; on our public pages they are also sent to Google Analytics, as described below.
• Where you came from: when you sign up or check out, the name of the website that sent you (not the full address), any campaign tags in the link you followed, the first page you landed on, and your optional answer to "How did you hear about MapIron?". Until then your browser keeps this in its local storage, not in a cookie, and it isn't shared with anyone.
• Service checks: once a minute our API records whether its own parts are working, for the status page. These records contain no personal data.
• Request logs: our servers and our network provider (Cloudflare) briefly log requests, including IP address, the URL (which can include coordinates or search text you send) and timestamp, for security and troubleshooting. We keep these logs for up to 14 days. The keyless demo on our website keeps visitor IP addresses in memory for up to an hour, only to limit how often it can be used. Its address suggestions may use the approximate area Cloudflare derives from your IP address, rounded to about 10 km, only to list nearby places first; that area is not stored.
• Sign-in: a short-lived code emailed to you (sent through our email provider) and a session cookie that keeps you signed in for up to 30 days. We use no advertising cookies.
• Affiliate program: if you join, we keep your referral code, website, how you said you'd promote MapIron, your payout method and payout email, whether we have your tax form (the form itself stays in our billing mailbox) and your commissions and payouts. When someone follows an affiliate link, we store the time, the page they landed on and a one-way hash of their IP address that changes daily (kept 90 days), and set a cookie named ps_aff for 60 days so a new account can be credited to that affiliate. Affiliates see counts of clicks, sign-ups and paying customers, never who those people are.
• Website analytics: on our public pages (not the dashboard or the page after checkout) we use Google Analytics, loaded through Google Tag Manager, to see which pages people visit, how they found us and which buttons they use. It sets first-party cookies named _ga and _ga_…, and Google receives your IP address, browser and device details and the pages you view; Google Analytics doesn't store IP addresses. When you sign up, start a checkout, buy a plan or buy a school data licence, our server also tells Google Analytics which plan or licence and the amount, using the analytics ID already in your browser (never your email or account). For a licence, the Buy link passes that ID to Stripe's checkout page so our server gets it back when the payment is confirmed. We keep this data for 14 months, don't connect it to your account, and have Google's advertising features and Google signals turned off. Visitors from the European Economic Area, the United Kingdom and Switzerland are measured without analytics cookies. You can turn website analytics off on Privacy choices, and we treat a Global Privacy Control signal from your browser as turning it off.

Emails we send

Sign-in codes, usage notices when an account reaches 80% and 100% of a monthly cap, a reminder 3 days before a free trial ends and a notice when it has ended, billing emails from Stripe, and notices about material changes to our terms. After you sign up we also send a welcome email with setup links, one check-in if your key hasn't been used after two days, and one note about a week after a trial ends without a plan. The check-in and the note each have a link to stop them. We don't send newsletters, and we never sell or share your address.

Locations and searches you send us

Coordinates and search text in API requests are used only to answer that request. We don't build profiles from them, sell them, or use them to train anything. Rendered images and results may sit in a short-lived server cache (hours) to speed up repeat requests.

Consumer pin sharing at /pin/

The consumer sharing tool saves the exact coordinates you choose, optional device-location accuracy, titles, notes and photos. These are saved in your browser first and uploaded while the tool is open and connected. It does not require an account. A necessary editing cookie identifies this browser for up to one year; only its one-way hash is stored on the server. Clearing that cookie can remove your ability to manage previously uploaded pins.

Anyone holding a sharing link can view and forward its shared notes, photos and location. Private notes and photos are stored with the pin but excluded from shared responses. They are access-controlled, not end-to-end encrypted. Link previews can show the exact map, title and coordinates; you can choose a generic preview. Notes and photos are not included in preview images. We do not run analytics or advertising scripts in the consumer tool.

Cloudflare hosts the consumer database, files and map service. Pins and their media are retained in private server storage until removed through a support deletion request; a link's expiry or revocation stops future shared access rather than deleting its contents. Deleting a pin in the tool hides it and ends shared access, while a private tombstone and associated stored data can remain. Email hello@mapiron.com to request permanent deletion. Offline copies, exports and messaging-platform preview caches cannot be recalled. Exported backups include private content and sharing links, so keep them private.

Device location is requested only when you choose to use it. Offline maps, pins and downloaded photos remain in browser storage until removed, cleared or evicted by the browser. New links and new uploads require a connection. Cloudflare can process request addresses and IP information for delivery, security and rate limiting; application request logging is disabled for the consumer Worker.

Who we share data with

Only the providers that run the service: DigitalOcean (hosting), Cloudflare (network and security), Stripe (payments), our email provider (sign-in codes and usage notices) and Google (website analytics on our public pages, as described above). We don't sell personal information.

Your choices

Turn website analytics off on Privacy choices (or send Global Privacy Control). Email hello@mapiron.com to see, correct or delete your account data. Deleting your account revokes all keys. Billing records Stripe must keep for tax law stay with Stripe.

Changes

We'll post updates here with a new version date.