Privacy policy.

Information we collect

Information you give us

• Account details. If you create an account we hold your email address. If you sign in with Google, Google sends us your name, email address, profile picture and Google account identifier. We never see your Google password.
• Contributions. Places you add, edits you suggest, check-ins (“I worked here”), reports, and Wi-Fi network names and passwords you share. Contributions are reviewed before they go live and then become part of the public map, except Wi-Fi passwords (see below).
• Saved places. The places you save are private to your account.

Information we collect automatically

• Approximate location. With your permission, your browser shares your location so we can show the nearest city, sort places by distance, and search near you when you add a place. We use it to answer that request and do not store it.
• Usage and device data. IP address, browser and device type, pages viewed and referring pages. We use these to keep the site running and secure, to limit how often one address can submit content, and to understand how the site is used.
• Cookies and local storage. To keep you signed in and for analytics. See Cookies below.

How we use your information

• To run the map and your account, and to improve them.
• To review, publish and attribute your contributions.
• To understand usage, find errors and improve performance.
• To protect against abuse and security threats, and to comply with the law.
• To contact you about your account or important changes to the service.

Where the law requires a legal basis, we rely on your consent (for location), the performance of our agreement with you (to run your account), and our legitimate interests (to operate, secure and improve the service, to understand how it is used, and to moderate content).

What is public

Third Desk is a public map. Places, edits and check-ins you submit are shown publicly once approved, under the display name on your account. That name comes from your Google account, or is one you choose on your account page; without one you appear as “A member”, and you can choose on your account page to appear as “A member” whatever your name. Your email address is never shown, in whole or in part. Please don’t put personal or confidential information in a submission.

Wi-Fi passwords are different. They are stored separately from the public listing and shown only to people who are signed in, one place at a time. They are never included in the public page, the map data or search engine results.

Who we share it with

We don’t sell your personal information. We share it only with providers that process it for us to run the site:

• Supabase for the database, sign-in and photo storage.
• Vercel for hosting.
• Google for sign-in with Google, for Google Analytics, and for place details, opening hours and photos from Google Maps. Google’s privacy policy applies to those services.
• CARTO for the map tiles, which your browser fetches directly when you open a map.

We may also disclose information if the law requires it, to enforce our terms, or to protect our users, the public or ourselves.

International transfers

Some of these providers are in the United States and other countries. Where your information leaves your country, we rely on the providers’ safeguards for such transfers.

How long we keep it

We keep your account information while your account is active. Because the map is a shared resource, contributions may remain after you delete your account, no longer linked to you, so the map stays accurate for the next person.

Your rights

Depending on where you live, including under the EU and UK GDPR, you may have the right to access, correct, delete or export your personal information, to object to how we use it, and to withdraw consent at any time. You can delete your account yourself from your account page. Your contributions stay on the map but are no longer linked to you. To exercise your other rights, email hello@thirddesk.co. You may also complain to your local data protection authority.

Cookies

We always use strictly necessary cookies, to keep you signed in. Blocking them in your browser will stop you from signing in.

We use Google Analytics to measure how the site is used: which pages are visited, from where, and on what kind of device. It sets its own cookies (_ga) to tell one visit from the next. We do not send it your name, email or account id. You can block these cookies in your browser, or install Google’s opt-out add-on; the site works the same either way.

Children

Third Desk is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We’ll change the date at the top and, for material changes, say so more prominently.

Contact

Questions about this policy or your data? Email hello@thirddesk.co. Our terms of service cover the rest.