Privacy

What Subsola keeps

Very little. There are no accounts, and the addresses you look up are never stored by Subsola. Here is everything, part by part.

The map

When you type an address, your browser sends it straight to that city’s own address lookup (the city or county geocoder) to find it. Those services have their own policies.
Map tiles, aerial photos and city open data load from their publishers’ servers, and the street data from Subsola’s own file server. They see the request like any website does.
A shared link carries the address in the link itself (?q=...). Nobody gets it unless you share the link.
The map sets no cookies. It keeps two small notes in your browser’s storage: whether you have seen the welcome guide, and how far a page load got, so a load that crashed can be reported on your next visit (stages only, never an address).

Product analytics run on PostHog, set up to know no one: nothing is stored on your device, there are no profiles or session recordings, and the project discards IP addresses.
Events say what was done and in which city ("address searched", "report opened"), never the address or the spot you looked at. Page addresses are sent without the part that holds the address.
Errors are reported to Sentry with the same care: addresses are cut from page links and messages before a report leaves your browser, and Sentry is told not to keep IPs or cookies.
Cloudflare, which hosts the site, can count page views with its own Web Analytics, which uses no cookies.

A note you send is stored with the email you give (if any), the page you were on (which can include the address you were looking at), your country as Cloudflare reports it, and the time.
To limit how much one sender can post, your IP address is combined with a secret and hashed. Only the hash is kept, never the IP itself.
Cloudflare Turnstile checks that a person is sending the note. It runs only when you open the form.
Notes go to the person who runs Subsola and nowhere else. They are kept until deleted by hand; to have yours removed, say so in a note.

Addresses asked about through subsola.com/mcp are never stored or logged. As on the map, the address goes to the city’s address lookup to be found.
The server logs counts and error names only.
To enforce its limits, each connection’s IP address is hashed with a secret, and the hash and a count per minute and per day are kept for 2 days, then deleted.

Subsola runs on Cloudflare, which processes every request and keeps its own logs under Cloudflare’s privacy policy.
Fonts load from Google Fonts.

Ask with the feedback form on the map.