Privacy

Reading geography.me needs no account. In the app, your tabs, places and visits stay on your iPhone.

geography.me

Reading needs no account and sets no cookie. Your light or dark choice stays in your browser.
What you search for goes to our servers to find the places, and stays in their logs for 7 days.
A shared tab (geography.me/t/…) shows anyone with its link the tab’s places, the minutes each person shared, the votes and what was written, each under the name its writer typed. The name you type is kept in your browser for a year, for those pages only, so you need not type it again. No one’s location is kept with a tab. Use My Location sends where your browser says you are, to about 10 m, to work out your minutes to each place by public transport or on foot; only the minutes are kept with the tab, and the place you sent stays in our servers’ logs for 7 days. A tab ends the evening after its time (a week after it was made when it has no time, a month at most) and is deleted a day later.
Signing in is optional. The account keeps your email address and, when you sign in with Apple, Apple’s id for you, the email Apple gives (often a private relay address) and your name if you share it. Each sign-in keeps a session, which can hold the IP address and browser it came from. A sign-in code works for 10 minutes. The cookie that keeps you signed in lasts 30 days.

Your tabs, saved places, rankings and visits are kept on your iPhone. Two things go further, and only when you ask: a tab you share, and a commute you pin.
Where you are is read on the phone. It goes to our servers with a search, the places open near you, a place’s ways and the weather, so the answer is near you, and stays in their logs for 7 days. A way by public transport is asked of Apple through our own Mac, and its answer is kept under the area it starts and ends in, never who asked, so the next ask is quick. Walking routes and the places around a stop are asked of Apple Maps by the phone itself.
Record your visits is off until you turn it on. Then the phone notes where you stop and asks Apple Maps which place it was. The visits stay on the phone.
A commute you pin sends its start, its end and the time it plans for, so its answers are ready before you leave. A random key kept on your phone is its only link to you, and unpinning it removes it from our servers.
A tab you share is kept by our servers as above, under the name you give.

Cloudflare runs the servers. The database is in the EU, in Ireland.
To delete your account, write to hi@systemoperator.com from the address you signed in with; for a shared tab, send its link. Everything kept for it is gone within 30 days.