Privacy policy.

Information we collect

Information you give us

• Account details. If you create an account we hold your email address. If you sign in with Google, Google sends us your name, email address, profile picture and Google account identifier. We never see your Google password.
• Contributions. Places you add, edits you suggest, check-ins (“I worked here”), reports, and Wi-Fi network names and passwords you share. Contributions are reviewed before they go live and then become part of the public map, except Wi-Fi passwords (see below).
• Saved places. The places you save are private to your account.

Information we collect automatically

• Approximate location. With your permission, your browser shares your location so we can show the nearest city, sort places by distance, and search near you when you add a place. We use it to answer that request and do not store it.
• Usage and device data. IP address, browser and device type, pages viewed and referring pages. We use these to keep the site running and secure, to limit how often one address can submit content, and to understand how the site is used.
• Cookies and local storage. To keep you signed in and for analytics. See Cookies below.

How we use your information

• To run the map and your account, and to improve them.
• To review, publish and attribute your contributions.
• To understand usage, find errors and improve performance.
• To protect against abuse and security threats, and to comply with the law.
• To contact you about your account or important changes to the service.

Where the law requires a legal basis, we rely on your consent (for location and analytics), the performance of our agreement with you (to run your account), and our legitimate interests (to operate, secure and improve the service and to moderate content).

What is public

Third Desk is a public map. Places, edits and check-ins you submit are shown publicly once approved, under the display name on your account. That name comes from your Google account or the part of your email before the @ sign. Your email address is never shown. Please don’t put personal or confidential information in a submission.

Wi-Fi passwords are different. They are stored separately from the public listing and shown only to people who are signed in, one place at a time. They are never included in the public page, the map data or search engine results.

Who we share it with

We don’t sell your personal information. We share it only with providers that process it for us to run the site:

• Supabase for the database, sign-in and photo storage.
• Vercel for hosting.
• Google for sign-in with Google, for Google Analytics, and for place details, opening hours and photos from Google Maps. Google’s privacy policy applies to those services.
• CARTO for the map tiles, which your browser fetches directly when you open a map.

We may also disclose information if the law requires it, to enforce our terms, or to protect our users, the public or ourselves.

International transfers

Some of these providers are in the United States and other countries. Where your information leaves your country, we rely on the providers’ safeguards for such transfers.

How long we keep it

We keep your account information while your account is active. Because the map is a shared resource, contributions may remain after you delete your account, no longer linked to you, so the map stays accurate for the next person.

Your rights

Depending on where you live, including under the EU and UK GDPR, you may have the right to access, correct, delete or export your personal information, to object to how we use it, and to withdraw consent at any time. To exercise these rights, or to delete your account, email hello@thirddesk.co. You may also complain to your local data protection authority.

Cookies

We use strictly necessary cookies to keep you signed in, and Google Analytics cookies to measure how the site is used. You can control cookies in your browser settings. Blocking the necessary ones will stop you from signing in.

Children

Third Desk is not directed at children under 16 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. We’ll change the date at the top and, for material changes, say so more prominently.

Contact

Questions about this policy or your data? Email hello@thirddesk.co. Our terms of service cover the rest.