Privacy

Small footprint, plain language.

Atlas Revealed works without an account. Your comparison and progress stay on your device unless you choose to share. Email information is collected only when you explicitly request a Daily reminder or send an inquiry.

Effective August 3, 2026

The short version: no ads, no required accounts, no sale of personal information, no cross-site tracking, and no session replay. Optional emails use explicit consent and are never joined to map activity or local learning progress.

1. What stays on your device

Your selected places, view, units, and shape positions are encoded in the page's URL fragment so the app can restore a comparison. The fragment is handled locally and is not sent to a web server as part of a normal page request. Offline files may be stored in your browser cache or inside the installed app.

Ordinary app use does not ask for your name, email address, phone number, account credentials, contacts, advertising identifier, or precise location. Search text and comparison contents are not collected by Atlas Revealed. The optional email features described below are separate and do not change account-free use.

2. Website analytics

The public website uses Vercel Web Analytics to understand aggregate usage such as visits, popular page paths, referring sites, approximate country, region, and city, browser, operating system, and device category. It also records coarse feature actions such as opening or completing Daily, starting or completing a lesson, revealing a comparison, using Surprise Me, initiating a share, opening an email form, or completing an email-form submission. These events never include email addresses, names, messages, selected places, guesses, searches, URL fragments, exact streaks, or map positions. Vercel describes this service as cookie-free and based on anonymized, aggregated data. Atlas Revealed removes query strings and URL fragments before an analytics event is sent.

We use these statistics to understand whether the product is useful and where it needs improvement. We do not use them for advertising, build individual profiles, or sell them. Vercel processes this data as our hosting and analytics provider under its own terms and privacy practices. Learn more in Vercel's Web Analytics privacy documentation.

3. Native app analytics

The iOS and Android Atlas Revealed bundles do not include Vercel Analytics, PostHog, or another third-party analytics SDK. Apple and Google may independently provide app-store, crash, or device diagnostics under your device settings and their own privacy policies.

To find reliability problems on the website and native apps, Atlas Revealed sends a first-party anonymous error counter only when a script or bundled resource fails. A report contains the platform, app build, error category, bundled script filename, and an approximate ten-line code range. It does not contain an error message, stack trace, URL, query, fragment, user or session identifier, IP-derived identifier, selected place, search, guess, score, streak, progress, email, or message. Identical reports are combined into daily counts in Supabase and used only to repair the product.

4. Optional email reminders and inquiries

If you request the Daily email, we collect your email address, explicit consent status, IANA time zone, confirmation and unsubscribe status, and delivery dates. The time zone is used only to send the reminder around 9:00 AM locally. We send a double-opt-in confirmation before activating a subscription. The email does not contain or receive your Daily guesses, score, streak, lesson progress, comparison state, or map activity.

If you send feedback or an educator inquiry, we collect the reply email, optional name, inquiry type, and message you provide. The message is delivered to BuildingRome Studio and is not written to the Atlas Revealed subscriber database. It may remain in the receiving mailbox and in delivery-provider records as needed to deliver and respond to it.

Supabase hosts the subscriber database and Edge Functions; the current project is configured in Canada Central. Resend sends confirmation, reminder, and inquiry messages and processes delivery, bounce, and suppression information. These providers process data on our behalf under their own terms and privacy documentation.

Unconfirmed subscriptions are removed after approximately seven days. Active subscriptions remain until you unsubscribe or request deletion. An unsubscribed address and status may be retained to honor the suppression request and prevent accidental re-subscription; you may request deletion at the contact below. Rate-limit records contain an HMAC-derived value rather than a raw email or IP address and are routinely removed.

5. Sharing and exports

Nothing is shared until you take an action such as copying a comparison link, opening the system Share sheet, or saving a map image. At that point, the link or file goes to the destination you choose and is governed by that destination's privacy practices. A shared URL can contain the comparison configuration in its fragment.

6. Device reminders

In the iOS or Android app, you can optionally ask your device to remind you about the Daily Reveal at 9:00 AM local time. The reminder is scheduled and stored by your operating system; Atlas Revealed does not send it from a server and does not receive your notification permission or interaction history. You can turn it off in the Daily screen or in your device settings.

7. External sources and links

Links to data providers and other websites open third-party services. Those services may collect information according to their own policies. Atlas Revealed bundles the core map data and does not need to contact those sources during ordinary use.

8. Retention and security

Vercel controls the infrastructure and retention mechanics for its analytics service. Vercel states that the visitor-identifying hash used by Web Analytics is discarded within 24 hours; aggregate reports may remain available according to our Vercel plan and Vercel's policies. Anonymous error counters are retained for approximately 90 days as daily aggregate operational records without a person or session key. Email systems use database access controls, server-only credentials, signed confirmation and unsubscribe links, origin checks, input limits, honeypots, and rate limiting. No internet service can promise perfect security, but collecting less data reduces the risk.

9. Children

Atlas Revealed is a general-audience educational tool. The optional mailing list and inquiry forms are not intended to collect personal information from children who cannot legally consent on their own. A parent, guardian, or educator should submit and manage an email request when required by applicable law. We do not use an email address to infer age or build a child profile.

10. Your choices

You can use the native app without Atlas Revealed web analytics, use browser privacy controls or content blockers on the website, clear locally cached site data, choose not to share a comparison, decline all optional email features, and unsubscribe through every Daily email. Because Atlas Revealed does not maintain user accounts, there is no account profile to access or delete. You may contact us to request access, correction, or deletion of email information you submitted.

11. Changes and contact

We may update this notice when the product or its providers change. The effective date above will be revised when we do. Privacy questions can be sent to projects@buildingrome.dev.