Privacy Policy

Last updated: 7 November 2026

The short version: your maps never leave your browser, there are no accounts, and we store as little as the service can function with. Time passes are optional and only needed for exports.

What stays on your device

Everything you make — selected regions, annotations, notes, exports and camera positions — is generated and rendered locally. Terrain tiles and imagery are cached in your browser’s storage (IndexedDB / Cache API) so revisits are fast; clearing site data clears them.

What we store on our servers

• Share links. If you create one, we store the map parameters and annotations needed to reopen the view (a small JSON payload — coordinates, colours, markers). Share links do not contain your identity.
• Passes. When you buy a time pass, we store a random ticket code, the pass type, the Waffo order/payment reference, the buyer email from the receipt, and the expiry. This is what lets you restore a pass in another browser with the ticket code.
• Feedback. If you send a message through the feedback page, we store the message and any optional contact details you provide so we can reply and fix issues.

Payments

Payments are handled by our merchant of record, Waffo (pancake.waffo.ai), which collects your email and payment details at checkout, processes the charge and remits applicable taxes. We never see or store card numbers. Waffo’s own privacy policy governs its processing; we retain only the receipt-level data listed above.

Analytics

The site uses a first-party, cookieless counter to count page views and product events (for example which export formats are used): page paths, event names, country and timestamp. It receives no IP addresses, user-agent strings, names, emails, map contents or persistent identifiers. There is no Google Analytics, no advertising network and no cross-site tracking.

What we never do

• No advertising or advertising cookies.
• No selling or sharing of personal data with data brokers.
• No profiling of individual users.

Data retention

Share-link payloads are kept while the link exists (links do not expire). Pass records are kept for up to 60 days from checkout for support and refund handling; the pass token itself expires at the end of the purchased period. Feedback messages are kept for up to 12 months. Server logs are retained briefly for security and then rotated.

Your rights

You can clear all local data at any time by clearing site data in your browser. To ask what is stored against a share link or pass ticket, or to request deletion, contact us through the feedback page with the reference in question — identity is not required for us to find it.

Contact

Privacy questions: use the feedback page or email admin@3dterrain.cloud.