Last updated: 28 October 2026. This policy describes map-chart.com, an independent map-making website.
Work on your device
Without an account, your map settings, imported CSV data, palettes and projects are processed and stored in your browser. Image and video exports are generated locally. Clearing site data can remove local work.
Account information
If you create an account, we store your username, a salted password hash, a hashed recovery key and session records. We do not ask for an email address. A session cookie is HttpOnly and used for authentication; it expires after seven days. Login rate limiting stores hashed request identifiers for abuse prevention.
Saved maps and palettes
Pressing Save while signed in uploads the project to your account. Saved projects can include your imported values, notes and geographic data. Cloudflare Workers and D1 provide hosting and account storage. Do not upload information you are not permitted to share with this service.
Issue reports
If you send a report, its page description and details are stored for operator review for up to 90 days. Please exclude personal or confidential information.
Shared links
A share link includes a compressed copy of project data in the URL fragment. Anyone with the link can read and edit a copy. Do not put confidential data into a public share link.
Logs and third parties
The hosting provider processes network information such as IP addresses to deliver and protect the service. Fonts and map datasets are served locally. No third-party analytics or advertising scripts are currently installed. If advertising is introduced, this policy and relevant consent choices will be updated first.
Your choices
You can download projects, delete individual saved projects or delete your account and its cloud data from Account. Clear this website’s browser storage to remove device copies. Account deletion does not erase files you downloaded or copies shared with other people.
Questions
Use the feedback page for the currently available reporting options. Keep your recovery key private: we cannot recover accounts without the key or current password.