Legal
Privacy policy
This policy explains what MapsBox collects when you visit mapbox.cc, create an account or use the platform, and who else handles that data. We have tried to describe what the system actually does rather than what is conventional.
What we collect
Account data
Your full name, work email address, organization name and chosen home region. Your password is stored only as a salted PBKDF2 hash, so we cannot read it.
Workspace content
The incidents you or your team create (road, type, severity, location, notes and timestamps), team membership and invitations, and API tokens. API token secrets are shown once and stored only as hashes.
Usage and activity
A count of API calls per workspace per month, and an activity log recording which user created, changed or cleared an incident, managed a token or changed team membership.
Contact and demo requests
If you use the contact form we store the name, email, organization, state, interest and message you submit so we can reply. With it we store the visitor’s country as reported by Cloudflare, your browser’s user-agent string and a salted hash of your IP address, which we use to spot repeated submissions.
Technical data
To limit abuse, sign-in and sign-up attempts are rate limited using a salted hash of the requesting IP address rather than the address itself.
Cookies
We set one essential session cookie when you sign in. It keeps you signed in for up to 30 days and is not used for tracking. We do not use analytics or advertising cookies.
How we use data
- To provide the platform: authenticate you, show your workspace and serve the API.
- To enforce plan limits such as seats and monthly API calls.
- To protect the service from abuse.
- To respond to your requests, including demo requests.
We do not sell personal data.
Who processes data for us
| Provider | Purpose |
|---|---|
| Cloudflare | Hosting, database and network delivery. Cloudflare Turnstile checks sign-up requests for bots. |
| OpenFreeMap | Map tiles. Your browser requests tiles directly from OpenFreeMap, which can see your IP address. |
| Google Fonts | Web fonts. Your browser requests font files directly from Google, which can see your IP address. |
Your choices
You can update your name and password in the console. To ask what we hold about you, to correct it or to have it deleted, contact us and we will respond.
Changes
If we change this policy we will update the date above. Material changes will be announced to account holders in the console.
Contact
Questions about this policy: use the contact page.