THE MAP CHALLENGE

Privacy Policy

Last updated: 23 July 2026

The Map Challenge is an independent worldwide online project. For privacy questions or requests, contact [email protected].

Data we process

Depending on how you use the project, we may process an optional display name and email address, selected country, selected map coordinates, country-level origin detected by Cloudflare, contribution amount, transaction reference, crypto asset, a locally generated participant identifier, contact-form messages, and limited technical information.

For security and abuse prevention, we derive a temporary pseudonymous rate-limit identifier from an IP address and rate-limit requests. Each rate-limit window lasts 15 minutes. We do not keep the IP address in clear in our rate-limit records; expired identifiers are deleted during a subsequent rate-limited request. Card details are processed by Stripe; we do not receive or store full card numbers.

Why we use data

We use information to operate the map and ranking, process and verify contributions, respond to messages and payment requests, protect the service from abuse, prevent fraud, and maintain reliable records. We process payment and contact information when needed to provide the requested service, and use limited technical information where necessary to protect the project and its users.

What is public

The selected map coordinates may appear publicly as a marker. The public map and ranking show country points and, where applicable, a Captain display name. We do not publicly display contribution amounts, email addresses, transaction references, approximate country of origin, IP addresses, or technical identifiers.

Service providers

We use Cloudflare to host and protect the website, Stripe to process card payments, and Resend to deliver contact-form messages. Crypto transactions are processed on public blockchain networks. These providers may process data as necessary to provide their services and may operate internationally.

Retention

We keep contribution and payment-related records for as long as reasonably necessary to operate the project, handle disputes, prevent fraud, and meet applicable legal obligations. Contact messages are kept only as long as needed to respond or follow up. Security rate-limit identifiers are active for 15 minutes and are deleted during a subsequent rate-limited request after they expire.

Your choices and rights

You can choose not to provide an optional display name or email address. You may request access, correction, deletion, restriction, objection, or a copy of personal data that we hold about you by emailing us. We may need information to verify that a request relates to your data. You may also have the right to complain to the relevant data-protection authority.

Updates

We may update this policy when the project or legal requirements change. The latest version will always be posted on this page.