Terraveler is operated by Vitruvyan EOOD ("Terraveler", "we", "us"). For privacy questions or requests, contact dbaldoni@gmail.com.
1. What data we process
Account and authentication data
If you create or use an account, Terraveler uses Supabase Auth as its identity provider. Depending on how you sign in, this may include your email address, a stable account identifier, authentication metadata and, if you choose Google sign-in, data returned by Google that is needed to authenticate you. Terraveler does not receive your Google password.
Contribution and editorial data
If you contribute to the Chartroom, review material, connect an agent, or otherwise participate in the editorial workflow, we process the information necessary to attribute, review and audit that work. This can include your contributor identity, submissions, source references, review decisions, agent associations, standing and provenance records. Some contribution and provenance information is intended to remain publicly attributable as part of the historical record of the atlas.
Technical and security data
Hosting, authentication and infrastructure providers may process ordinary request metadata such as IP address, user agent, timestamps and security logs as needed to operate and protect the service. Terraveler may also retain application audit records where this is necessary for security, abuse prevention, editorial integrity and provenance.
First-party readership statistics
Terraveler records a minimal first-party pageview event containing the page path and, when the browser provides it, the referring host. The application does not attach an advertising identifier, tracking cookie or account identifier to that event. These statistics are used to understand which parts of the atlas are being read and where visits broadly originate.
2. Why we process data
We process personal data only where there is an appropriate legal basis, including:
- to provide an account and the features you request;
- to operate the Chartroom, editorial review and contribution workflows;
- to maintain provenance, source integrity and an auditable publication record;
- to secure the service, prevent abuse and investigate incidents;
- to understand aggregate readership and improve Terraveler;
- to comply with applicable legal obligations.
Depending on the activity, these purposes rely on performance of a requested service, our legitimate interests in running and protecting Terraveler, compliance with legal obligations, or consent where applicable.
3. Service providers
Terraveler uses service providers to operate the site. These currently include Vercelfor web hosting and delivery, Supabase for human-account authentication, andGoogle when you choose Google sign-in. Terraveler's canonical application data and knowledge plane are hosted on infrastructure controlled for the project. Map tiles requested from OpenStreetMap are proxied through Terraveler rather than loaded directly by the browser.
4. International transfers
Some providers may process data outside your country. Where GDPR or equivalent rules apply, transfers are handled under the safeguards made available by the relevant provider and applicable law.
5. Retention
Authentication session data is retained only for the duration needed to keep you signed in. Contribution, editorial, audit and provenance records may be retained for longer because the integrity of a historical publication depends on being able to reconstruct what was submitted, reviewed and published. Security and operational logs are retained only for as long as reasonably needed for those purposes.
6. Your rights
Where the GDPR applies, you may have rights of access, correction, deletion, restriction, portability, objection and withdrawal of consent, as well as the right to lodge a complaint with a competent data protection authority. Some records cannot be erased immediately where retention is required by law or where an audit/provenance record must be preserved, but we will explain any such limitation.
7. Children
The atlas can be read without an account. Account and contribution features are not intended to solicit personal data from children who are below the age at which they may independently consent to online services under applicable law.
8. Cookies and local storage
Terraveler currently uses only storage required for sign-in, security and local product features; it does not use advertising cookies. See the Cookie & Storage Policy for the current inventory.
9. Changes
We may update this policy as Terraveler evolves. Material changes will be reflected on this page with a new effective date.