Legal

Privacy Policy

Last updated September 2026

We're a two-person company. This page says plainly what we collect, why, and who it's shared with. Not because a template told us to, but because you're trusting us with an account. If something here changes as we grow, we'll update this page rather than bury it.

What we collect

Creating an account gets you an email address and, if you sign in with Google, your name and profile photo. That's it to start. We don't ask for anything else to let you look around or export a file.

Once you're signed in, we keep a record of what you do in Substrata, tied to your account, so we can fix problems, see which towns and features people actually use, and reproduce a past export instead of leaving you with a one-shot file you have to redo from scratch. Specifically, we record:

• when you sign in, and roughly how long each session lasts;
• which town you open (the town or region, never a street address, coordinates or the text you typed into search);
• which features you use, such as turning a layer on or off, and the steps you take through the export wizard;
• every export: the format, the layers, the town and the scale;
• errors the app hits, with anything that could identify a place or a person removed.

We don't record where you click on the map, your search text, your address or coordinates, your screen, or anything you type. Signed-out visitors are not tied to an account: for them we count only that someone had the map open, using a random number stored in your browser that isn't linked to your name or email.

Who can see it: the two of us can see totals, such as how many people opened a given town this week. A short, named list of people at Synthetic Schematics can look up one person's activity, for example to help you with a problem, and each of those look-ups is logged. Detailed activity records are deleted after 90 days; the export record is kept for as long as your account exists so past exports can be reproduced. You can switch the activity record off in your account settings, and exports will still work.

What we don't do

• We don't sell your data. Not to advertisers, not to data brokers, not to anyone.
• We don't run ad trackers or third-party analytics pixels on this site.
• We don't share your email outside the services below without asking you first.

Who it's shared with

Three services, each doing one job:

• Supabase. Hosts our database and handles sign-in. Your account record, export history and activity record live there.
• Google. Only if you choose "Continue with Google." We receive your name, email and photo; Google's own privacy policy covers what they do on their side.
• Cloudflare. Serves this site. Standard request logs (IP address, browser) for keeping the site running and secure, nothing beyond that.

When billing exists, a payment processor (most likely Stripe) will be added to this list before it's added to the product. We'll update this page first.

Cookies

One cookie or local-storage entry keeps you signed in across visits. Another local-storage entry holds the random number that lets us count signed-out visitors without knowing who they are. No third-party advertising or tracking cookies.

Your data, your call

Want your account and everything tied to it deleted? Email us below and we'll take care of it. No retention gimmicks, no "are you sure" loop designed to wear you down.

Changes

If this policy changes in a way that matters, in what we collect or who we share it with, we'll say so here with a new date at the top, not just quietly edit it.

Questions

hello@synthetic-schematics.com. A real inbox, read by a person.