Privacy Policy

01Who we are

This policy covers YourSledMaps.com. Our owner is responsible for personal information. Privacy requests and complaints: drivearthsupport@gmail.com.

02What we collect

• Account information: email, account ID and, when you use Google or Discord sign-in, the name and profile picture they provide.
• Orders: selected area, map name, description, options, price, status and build history.
• Payments: Stripe transaction reference, checkout email and payment status. Stripe collects payment details directly; we do not receive your card number.
• Plans: your plan, its status, maps used and left, renewal dates, and Stripe subscription and customer references.
• Pricing test (outside the EU/EEA, the UK and Switzerland): which offer group you are in (per-map prices, plans, or both). It is kept in your browser's local storage and, once you sign in, on your account, so you see the same offer on each visit and device. Visitors in the EU/EEA, the UK and Switzerland are not in the test and always see both offers; nothing about it is stored on their device. We don't use device fingerprinting.
• Creator codes and referral links: a code you type at checkout, or the code from a referral link you followed. Outside the EU/EEA, the UK and Switzerland, a link's code is kept in your browser's local storage for 30 days; in those places it is kept only for that visit, never on your device. When you are signed in, the code is linked to your account on our servers for 30 days, and it is recorded on the orders and plans it applies to. For each code we only count clicks; a count says nothing about who clicked.
• Creators: name, contact details, code, sales totals and commission, payout details and any tax forms you send us.
• Support: messages and information you send us.
• Technical information: IP addresses and request logs processed by Cloudflare, plus filtered error reports with a hashed user ID.
• Usage analytics: pages viewed and site actions (for example opening the builder or starting a checkout), with browser, device type, country, language, your offer group and any creator code. Without session recordings, PostHog itself uses no cookies or local storage; it groups a visit by a hash of the IP address and browser that it renews every day.
• Session recordings: through PostHog (EU cloud, Frankfurt), a replay of how pages are used: clicks, scrolls, mouse movements, page changes and what the page shows. What you type is hidden, and so are names, email addresses, public aliases and the sign-in windows; no network requests or console logs are recorded. In the European Union, the EEA, the UK and Switzerland, recordings start only after you select “Allow”; elsewhere they are on by default and you can turn them off. While recordings are on, PostHog keeps a random visitor and session ID in your browser’s storage, not in a cookie.
• Location in the builder: your approximate location from your IP address (from Cloudflare) is used only to centre the map when the builder opens; it is not stored. Your precise location is used only if you allow it in your browser, and only to move the map; it is not stored or sent to us. An area you build reaches us like any other map; a starting area the builder draws at your location is rounded to about 5 km.

Map selections can reveal places connected to you. Providing account and order details is necessary for the corresponding service; without them, we may be unable to process the order or provide the account.

03Why we use it

We use information to manage accounts, take payment, build and deliver maps, provide support, secure the service, resolve disputes and meet legal and accounting obligations. Our emails concern accounts and orders; we do not send marketing emails. Session recordings help us find what is confusing or broken on the site.

Where UK data protection law applies, our bases are performance of the contract for accounts, orders and support; legal obligations for required records; and legitimate interests in security, fraud prevention and technical fault diagnosis, balanced against your rights. We obtain consent where it is required. Session recordings rely on your consent.

We use your offer group to show you the same offer each time and to compare offers by sales, and creator codes to credit and pay creators, apply a creator's discount and prevent referral fraud. Where UK data protection law applies, these rely on our legitimate interests in testing our prices and paying creators correctly; payments to creators also rely on our agreement with them and on tax obligations.

Publication filters flag content for human review; a flag does not by itself reject your order. AI-assisted failure reports help us diagnose technical problems; they do not make final refund or publication decisions.

04Who we share it with

• Cloudflare: hosting, API, database, files and security.
• PostHog (servers in the EU, Frankfurt): usage analytics and session recordings.
• Amazon Web Services: build servers, transactional email and operational alerts.
• Clerk: sign-in and accounts; Google or Discord also handle sign-in if you select them.
• Stripe: payments, monthly plans, and the billing page where you manage or cancel a plan.
• Creators: if you buy with a creator's code, the creator sees only sale totals and their commission, never your name, email, account or map.
• mod.io: public level hosting and distribution.
• Anthropic: technical logs, including order details but not payment data, when repeated build failures need diagnosis.
• Google Gmail: support messages.
• Discord: operational alerts containing order IDs.

The level, selected location, title and description are published on mod.io through our account and can be accessed or downloaded by others. Avoid including personal information in public text.

Providers may process data outside Québec, including in the United States and elsewhere in Canada, where different laws apply. Contact us for information about a transfer or its protections. Providers also act under their own privacy notices for activities they control independently. We may disclose information when legally required or necessary to address a dispute.

05How long we keep it

• Public mod.io listings: until removed.
• Order event logs: 90 days.
• Error reports: 30 days.
• Usage analytics: up to 1 year.
• Session recordings: 30 days.
• Order, plan and payment records, including creator commissions and payouts: for the legally required retention period, generally 6 years from the end of the relevant Canadian tax year, or longer where required.
• Offer group (outside the EU/EEA, the UK and Switzerland): in your browser until you clear it, and on your account until you delete the account.
• Creator code: outside the EU/EEA, the UK and Switzerland, 30 days in your browser; 30 days on your account; on orders and plans for as long as those records are kept.
• Click counts per code: as long as the code exists; they hold no visitor data.
• Other account information: until account deletion; support and security information: only as long as needed for the relevant request, security issue or legal obligation.

Deleting an account does not delete records we must legally retain or automatically remove a public mod.io listing; request removal separately.

06Your rights

You can export your account data and delete your account from the site. Contact us to request access or correction and, where applicable, deletion, portability, restriction, objection or withdrawal of consent. Withdrawal does not invalidate earlier lawful processing. We may need to verify your identity and retain legally required records. To turn session recordings on or off, use “Privacy choices” at the bottom of any page; the choice applies to this browser.

We respond within applicable legal deadlines. You may complain to Québec’s Commission d’accès à l’information, the Office of the Privacy Commissioner of Canada, the UK Information Commissioner or another competent authority, as applicable.

07Changes and contact

We publish updates here and give any additional notice or request any consent required by law. Contact: drivearthsupport@gmail.com.