Privacy Policy

1. Who we are

Mappelier, LLC, a Maryland limited liability company, is responsible for the personal information described in this policy.

Privacy questions and requests may be sent to privacy@mappelier.com.

2. Initial United States availability

Mappelier is currently offered for use only within the United States. Our event catalog may include events in other countries for people in the United States researching art and travel, but the interactive Service is not presently offered outside the United States.

Cloudflare derives a country code from an incoming IP address so we can enforce this regional availability. Requests identified as originating outside the United States, or for which a country cannot be determined, receive a limited regional notice instead of the interactive Service. That notice does not initialize Mappelier accounts, maps, device location, or the application database. Our providers may retain limited request and security records as described below.

3. Information we collect

Information you provide

• Account information, such as your email address, display name, and account identifier. Our authentication provider processes the password you enter; Mappelier does not receive or store a readable copy of your password.
• Content you submit, including public event links, factual event details you enter in your own words, saved events, event reports, and support messages.
• If you choose “Email me when this is fixed” on an event report, the email address you provide. This is optional, stays private, and is used only for that report’s one-time resolution notice.
• Information you include when you contact us or exercise a privacy right.

Information collected when you use the Service

• Feature and account activity, such as events you save and the actions needed to operate those features.
• Technical and security information that our infrastructure providers may process, such as IP address, browser and device type, request timestamps, referring pages, and error or security logs. Retained service logs can also include city-search filters, approximate location derived from your IP address, and request-response timing. Authentication and related technical records can be associated with your account.
• When the website or app encounters an unexpected software error, Mappelier may send a short diagnostic containing the error name, a sanitized message, the app platform, and the page path without its query string. These diagnostics omit account details, email addresses, precise location, user-agent strings, and stack traces.
• A short-lived pending-save identifier stored in your browser for up to 30 minutes when you begin saving an event before signing in. Authentication session information is also stored locally so you can remain signed in. The website uses browser storage; the native app stores authentication sessions in encrypted operating-system credential storage.

Location and map information

If you grant permission, Mappelier uses your device’s precise location within the website or mobile app to show nearby events and position the map. Mappelier does not save those precise device coordinates to your account or database, and does not place them in the page URL. When nearby results are unavailable, your browser may match those coordinates to the nearest U.S. Census place. Mappelier may retain only that place’s city, state, and public Census identifier, without the coordinates or an account identifier, to prioritize future event coverage. Place searches can be used for the same purpose. You can deny or withdraw location permission in your browser or device settings. Place searches, map tiles, and map areas may be requested from mapping providers, which receive the technical information ordinarily included in an internet request.

Mobile app permissions

The mobile app asks for location access only when you choose a nearby-events feature. It does not require location access to browse or search. Sharing an event, opening a calendar link, or visiting an original listing happens only after you choose the corresponding action. You can review or change app permissions in your device settings.

Public event information

We maintain event information from reviewed public sources and private suggestions. A suggestion may include an organizer website or social-media post URL as a reference. Submitting a link does not cause Mappelier to copy or automatically scrape the linked post; suggestions are manually reviewed. Routine automated collection is enabled only after a source has been reviewed for that access and use. Event information may include names or professional contact details that an organizer has made public in connection with an event. Public listings are treated separately from private account data.

4. How and why we use information

We use personal information to:

• Provide accounts, authentication, and saved events.
• Process submitted event information and maintain the public event catalog.
• Answer support requests and communicate about the Service.
• Send a requested one-time notice when an event report has been resolved.
• Protect the Service, prevent abuse, enforce rate limits, and diagnose failures.
• Determine and enforce the Service’s initial regional availability.
• Comply with law and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service and maintaining an accurate event catalog, your consent for optional device permissions, and compliance with legal obligations. You may withdraw consent through your browser, device, or account settings without affecting earlier processing.

5. How we disclose information

We disclose information only as reasonably necessary to the following recipients:

• Infrastructure and database providers, including Cloudflare for hosting, delivery, and security and Supabase for authentication, database, and related backend services.
• Sign-in and communication providers, including providers used to authenticate accounts and send account-related email.
• Mapping and content providers, including OpenFreeMap for map delivery, OpenStreetMap and Nominatim, Google Maps or Google Calendar when you choose those links, and remote image hosts used by event listings.
• Event-processing providers, including Firecrawl and an OpenAI-compatible artificial-intelligence service, which may process public event pages from sources approved for that access or original factual text entered by a submitter to help extract and organize listing information. Social-media posts supplied as references through Add Event are not sent for automated scraping through that feature.
• Professional advisers and authorities when reasonably necessary to comply with law, protect rights and safety, or complete a corporate transaction.

Event information you submit may become part of the public catalog. Please do not submit personal or confidential information that should not be public.

We do not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. The Service does not currently use third-party advertising or analytics trackers.

6. Retention

We generally keep account information and private feature data while your account remains active. Account deletion removes the authentication account and associated private feature data, subject to limited backups, legal obligations, fraud prevention, and records needed to resolve disputes. Private event suggestions are retained as reasonably necessary to review them, prevent abuse, and maintain submission records. If approved factual details become part of the public catalog, the listing may remain after account deletion, but the submitting account link is removed.

Support records and security logs are kept only as long as reasonably necessary for the purpose collected, legal compliance, security, or dispute resolution. Retention periods may also depend on our service providers’ backup and security schedules.

An optional email address supplied with an event report is removed after the resolution notice is successfully sent. If a report is dismissed, the address is removed without a notice. If delivery temporarily fails, we retain the address only so the requested notice can be retried.

7. Your choices and privacy rights

You can manage browser permissions through your browser or device and delete your account from Settings. You may also ask us to access, correct, delete, restrict, or provide a portable copy of personal information, or object to certain processing, where applicable.

Email requests to privacy@mappelier.com. Describe your request and the country or state where you live. We may need to verify your identity and authority before acting. You may use an authorized agent where local law permits. We will not discriminate against you for exercising a privacy right.

Depending on applicable law, you may have a right to appeal our response. Send an appeal to the same address with “Privacy Appeal” in the subject line.

8. Processing locations

Mappelier is based in the United States and initially offers the Service only within the United States. Information may be processed in the United States and other locations where our providers operate. Where applicable law requires a transfer mechanism or contractual protection, we use the required measure.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls and account-level database restrictions. No internet service is completely secure, so we cannot guarantee absolute security. Email support@mappelier.com if you believe your account or the Service has been compromised.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 provided personal information, contact us so we can investigate and delete it. Additional age restrictions may apply under local law.

11. Changes to this policy

We may update this policy as the Service or law changes. We will post the revised policy and update its effective date. If a change materially affects how we use personal information, we will provide additional notice when required.

12. Contact us

For privacy matters, email privacy@mappelier.com. For general support, email support@mappelier.com.