PRIVACY
What is stored, and why.
Effective 1 September 2026. Applies to merestonemaps.com. The app on iPhone, iPad, Mac and Apple Watch has its own privacy policy, linked from the App Store.
If you only look at the map
Nothing about you is stored. When a layer is fetched, your browser asks merestonemaps.com for the area on screen, and merestonemaps.com asks the publishing agency's service for that area. The agency receives merestonemaps.com's request, not yours: it sees our server's address and the area, never your address. Our server keeps the answer in a short cache so the next person looking at the same area gets it faster. The base map itself (streets, coastlines, place names) comes straight from OpenFreeMap, which sees your address the way any website you visit does. Server logs held by Cloudflare, which hosts the site, contain your IP address for a limited time for security and abuse prevention. Searching for a place sends what you type to Nominatim, OpenStreetMap's search service, which sees that text and our server's request. A grid reference is worked out on our own server and is not sent anywhere.
If you sign in
Your email address, the date you signed in, the language you used, and a record of each sign-in session (when it started, when it was last used, and the browser it came from, so you can sign out everywhere from your account page). Sign-in emails are sent through Resend, a transactional email service, which processes your address to deliver them. Sessions last 30 days and are extended when you visit. When a sign-in link is requested we also record the IP address it came from, so the same address cannot request an unlimited number of links. That record is deleted with the expired link, within a day.
If you buy
Checkout is handled by Stripe as the merchant of record. Stripe collects your payment details and billing address on its own pages; merestonemaps.com never sees your card number. We store which product you bought, Stripe's identifiers for the purchase or subscription, and its status, so the layers you paid for unlock and stay unlocked.
What is never done
No advertising, no analytics trackers, no selling or sharing of your data, no marketing email. The only cookie is the one that keeps you signed in, and it is set only after you sign in.
Where it is kept
Data is held by Cloudflare in Western Europe. Stripe and Resend hold what they need to do their part, under their own policies.
Your rights
You can see what is held about you by emailing support@merestonemaps.com from the address you signed in with, and you can ask for it to be deleted. Deleting the account removes your email and sessions; a record of past purchases is kept as long as the law on accounting requires, without your email attached.
Who is responsible
Leon Figueira, sole trader, United Kingdom. Contact: support@merestonemaps.com.