Privacy policy

• Without an account, the countries you mark are saved only in your browser (local storage). They never reach our servers unless you create an account, when they’re added to it.
• With an account: your email address, your name if you give one, and your sign-in method (managed by Firebase Authentication). Your map (countries, regions, places, trips), settings and plans are stored in Google Cloud Firestore in the EU (multi-region eur3).
• Shared plans are visible to everyone you invite, including your name, your options, votes and comments. Anyone with an active invite link and an account can join; the plan’s owner can turn the link off or remove people.

We use this data only to run VisitedAtlas. We don’t sell it, and we don’t show ads.

If you accept, we use Google Analytics 4 to count visits and see which pages and features are used. It sets first-party cookies (_ga, _ga_*, kept for up to 2 years) and Google keeps analytics data for up to 14 months. Google Analytics doesn’t store IP addresses. Google signals and ad personalisation are off, and we don’t send your name, email, map or plan contents.

If you decline, or before you choose, no analytics cookies are set. Google may still receive anonymous, cookieless pings (for example “a page was viewed”) without any identifier, which it uses to estimate overall numbers.

You can change your choice at any time: . The site otherwise uses only local storage that it needs to work (your guest map, your analytics choice, and whether you were signed in).

• Google (Firebase Hosting, Authentication, Firestore; Google Analytics): hosting the site, your account and data, and analytics as described above. Hosting servers see your IP address when they deliver pages.
• OpenFreeMap: detailed map tiles and labels are loaded from their servers, which see your IP address.
• Photon by komoot: in the trip planner, when our built-in city list has few matches, the text you type in the place search is sent to this OpenStreetMap search service.

• Export everything as a JSON file, any time, in Settings.
• Delete your account in Settings. It deletes your map, your plans (with their comments) and your account; on plans you were invited to, your comments are deleted and you’re removed.
• Depending on where you live (for example under the EU/UK GDPR), you can ask for access to, correction or deletion of your data, object to processing, or complain to your data-protection authority. Email privacy@visitedatlas.com.

We process account and map data to provide the service you signed up for (GDPR Art. 6(1)(b)), and analytics only with your consent (Art. 6(1)(a)), which you can withdraw at any time. Technical logs are kept for security and to keep the site running (legitimate interest, Art. 6(1)(f)).

If this policy changes, we’ll update the date at the top of this page.