Privacy Policy

1. Controller

The data controller is MSP Trading OÜ, registry code 14623503, Olevi tn 12, 65604 Võru, Võru maakond, Estonia. Privacy questions and requests: info@mapicito.com.

2. Data we process

• Local projects: map composition, text, markers, routes and settings stored in your browser.
• Optional account: email address, password hash, sessions and cloud-synced project data.
• Purchases: opaque buyer identifier, Stripe references, product, amount, currency, billing name and address, optional business tax ID, payment and refund status.
• Printed orders: name, email, phone, delivery address, selected artwork, print specifications, provider order and tracking status.
• Cookieless product analytics: an allowlisted event name with limited context such as the canonical source page, coarse device class, selected flow or template, city slug and country code, product type, poster-size identifier, currency and price in minor units. Analytics records do not contain names, email addresses, delivery addresses, custom text, project, account or session identifiers, cookies, or a full IP address. A verified purchase uses the product, size, currency and amount already checked by the server, plus allowlisted flow and source values attached when Checkout was created, and a one-way duplicate-prevention hash.
• Optional Google Analytics 4 measurement: if you accept Analytics, Google may receive a sanitized public page URL containing only allowlisted campaign parameters, an origin-only external referrer, browser and device information, technical connection data and pseudonymous _ga cookie identifiers with a manually emitted page_view. Mapicito does not send Google custom map text, names, contact or delivery details, account, project, Checkout or session identifiers, does not measure private routes or unknown query values, and keeps Google Signals and all advertising features disabled.
• Optional Meta marketing measurement: if you accept Marketing, Meta Pixel may receive the public page URL, browser and device information, IP address, Meta cookie or account identifiers, and limited standard events such as PageView, ViewContent, CustomizeProduct, AddToCart and InitiateCheckout. Mapicito does not include your custom map text, contact or delivery details, account, project or Checkout identifiers in those event parameters, and disables the Pixel on URLs containing private identifiers.
• Security and operations: an allowlisted failure category and technical error code used for service reliability. Browser reports contain no free-text error message, project content or customer details.

3. Purposes and legal bases

• Contract and steps you request before a contract: provide optional account and cloud features, create quotes, take payment, deliver a digital file, produce and ship a poster, and provide order support.
• Legal obligations: keep accounting and tax records, handle consumer claims, and meet product-safety and other duties that apply to an order.
• Legitimate interests: prevent fraud and abuse, apply rate limits, keep the service reliable, secure accounts and purchases, measure aggregate use of the creation and checkout flow, improve where visitors abandon it, and establish or defend legal claims. Product analytics is deliberately data-minimized, does not create visitor profiles and is not used for advertising. Browser analytics is not sent when Global Privacy Control or Do Not Track is enabled. We balance these interests against your rights, and you may object where this basis applies.
• Consent: if you separately accept the optional Analytics choice, we use Google Analytics 4 to measure consenting visits to public pages and attribute source, medium and campaign. If you accept the optional Marketing choice, we use Meta Pixel to measure visits and funnel actions from Facebook and Instagram and to support advertising attribution. You may reject either choice without losing Mapicito features and may withdraw consent at any time through Privacy choices. Withdrawal does not affect processing that was lawful before it.

An account is optional. If you place an order, the checkout and delivery fields marked as required are necessary to enter into and perform the contract; without them we cannot take payment, supply the file or deliver the poster.

4. Service providers

We use Hostinger for application hosting, Supabase/PostgreSQL for server-side records, Stripe for checkout and payments, and Printify and its selected print provider for production and delivery. Map and place-search requests may be served through OpenStreetMap/OpenFreeMap, Photon/Komoot and Mapterhorn infrastructure. If you accept optional Analytics, Google receives sanitized page-view data through Google Analytics 4 under Google's applicable privacy terms. If you accept optional Marketing, Meta Platforms Ireland Limited receives Pixel events for advertising measurement and attribution under Meta's applicable privacy terms. Providers receive only the data necessary for their role.

5. Browser storage and cookies

Mapicito uses browser storage for local projects, recovery state and checkout continuity. Essential HttpOnly cookies keep an optional account session or anonymous purchase connected to the correct browser. Product analytics does not set or read a cookie, local-storage value or other visitor identifier. One versioned local privacy record stores the separate Analytics and Marketing choices. Only Analytics acceptance permits Google's _ga and _ga_* analytics cookies; only Marketing acceptance permits Meta's _fbp and, where applicable, _fbc advertising cookies. Rejecting or withdrawing the relevant choice keeps that provider off; Global Privacy Control or Do Not Track overrides acceptance. Disabling essential storage can prevent saving, payment verification or downloading a purchased file. See the Cookies & Local Storage notice for exact categories.

6. Retention

• Local projects remain until you delete them or clear the browser's Mapicito storage.
• An account session lasts up to 30 days and an anonymous buyer cookie lasts up to 365 days. Account and cloud projects remain until deletion is requested; residual backup copies are removed as routine backup cycles overwrite them, unless retention is legally required.
• Product-analytics events are automatically removed after 13 months. They are stored without a visitor, account, project, session, cookie or full IP identifier.
• Your versioned Analytics and Marketing choices stay in local storage until you change them, clear site data or the consent version changes. Google _ga and _ga_* cookies are configured for no more than 90 days, and GA4 user- and event-level property retention is set to two months. Google's standard aggregated reports may follow separate service retention rules. Meta advertising cookies are normally retained for up to 90 days; Meta controls retention of data it receives under its own notice.
• In-memory analytics rate-limit entries expire after one minute. Other rate-limit records are normally removed within two days after the last relevant request.
• When an unpaid printed-poster Checkout expires, or an unpurchased quote reaches its cleanup time, Mapicito deletes the fulfillment record containing the delivery details. A separate provider-cleanup task temporarily keeps only the opaque Stripe customer, private product and artwork identifiers needed to remove abandoned provider drafts; it contains no name, email, phone or delivery-address fields.
• An expired unpaid digital Checkout is verified with Stripe before its temporary Mapicito checkout record is removed. Paid order, payment and accounting records are retained for the statutory period that applies to the record. Delivery, production and support data is retained for as long as needed to fulfil the order, handle the two-year conformity-claim period, resolve disputes, prevent fraud and meet legal obligations.

When no fixed period applies, we decide retention by the purpose for which the data was collected, the status of the order or account, the likelihood and duration of a legal claim, and mandatory accounting, tax, consumer and product-safety requirements. Our providers may retain their own records under their notices and legal duties.

7. International processing

Some providers, including Google where you accept Analytics and Meta where you accept Marketing, may process data outside Estonia or the EEA. Where required, transfers are protected by an adequacy decision, the European Commission's standard contractual clauses or another lawful transfer mechanism. You may ask for information about the applicable safeguard, or a copy where available, by emailing info@mapicito.com; legally protected commercial details may be redacted.

8. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction or portability, object to processing based on legitimate interests, or withdraw consent where consent is the basis. You may complain to the Estonian Data Protection Inspectorate or your local supervisory authority. Contact info@mapicito.com. We may need to verify the request and may retain records where the law requires it.

9. Automated decisions

Mapicito does not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you. Payment and production providers may perform automated security or fraud checks under their own privacy notices. Google Signals and Google advertising personalization are disabled. If you accept Marketing, Meta may use Pixel data for advertising measurement and personalization under Meta's notice; Mapicito does not use Google Analytics or Meta data to make legal or similarly significant decisions about you.

10. Security

Connections use HTTPS. Payment card data is collected by Stripe rather than Mapicito. Server credentials are not sent to the browser, and purchase access is tied to opaque browser or account credentials. No internet service can promise absolute security; please report suspected misuse promptly.