Privacy policy
Last updated 9 October 2026
This policy explains what personal data Tiny Topo collects and why. The controller is Tiny Topo. Contact: support at tinytopo.com.
In short: no advertising and no selling of data. We keep what we need to run your account and payments. We count visits ourselves without cookies, and with Google Analytics, which uses cookies only with your consent where the law requires it.
What we collect
| Data | Why | How long |
|---|---|---|
| Your Google account’s name, email address, picture and account id (when you sign in) | To create and run your account (contract) | Until you delete your account |
| Sessions: a random token in a cookie (only its hash is stored), the time, a hashed IP address and your browser’s name | To keep you signed in and protect your account (contract, legitimate interest in security) | 30 days after last use |
| Usage records: downloads, videos and models built, with the plan and format | To apply your plan’s allowances and prevent abuse (contract) | Downloads: while your account exists. Daily model counts: 45 days |
| Model files you download | To deliver them to you | Deleted within 24 hours |
| Subscription and order status from Polar (no card details) | To give you what you paid for (contract) and keep records (legal obligation) | While your account exists; Polar keeps invoices as the law requires |
| Share links: the place, the settings and the preview image | To show the model to people you share it with | Until you delete the link or your account |
| Visit statistics: page, referring site, country, device type and a daily anonymous visitor code | To understand how the site is used (legitimate interest) | 400 days; the visitor code can’t be linked to you or across days |
| Google Analytics: pages viewed, how you arrived, device and browser, approximate location, and steps such as building a model or buying a plan | To understand and improve the site (consent in the EEA, UK and Switzerland; legitimate interest elsewhere, with an opt-out) | Up to 14 months in Google Analytics |
| Server logs: requests and errors, with IP addresses hashed | To run and secure the service (legitimate interest) | Up to 30 days |
Anonymous visitors can use the editor without an account. To apply the daily limit on models built, we count them against a salted hash of your IP address, never the address itself.
Cookies
Strictly necessary cookies:
- Session cookie (
__Host-tt_session) — keeps you signed in, for up to 30 days. - Sign-in cookies (
tt_gnonce,tt_oauth) — protect the Google sign-in against forgery; they last 10 minutes.
Analytics cookies (Google Analytics 4):
_ga,_ga_*— tell visits from the same browser apart, for up to 13 months. In the EEA, the UK and Switzerland they are set only after you accept; until then Google Analytics counts visits without cookies. Elsewhere they are on by default and you can turn them off.
The editor also remembers your style preferences and your cookie choice in your browser’s local storage; they never leave your device. Our own visit statistics use no cookies or storage at all. Advertising features of Google Analytics are switched off.
Who else processes data
- Google — sign-in with your Google account, and Google Analytics (see Cookies above). Google processes analytics data on our behalf under its data processing terms.
- Polar (merchant of record) — payments, tax, receipts and the customer portal. Polar is an independent controller for the payment data it collects; see its privacy policy.
- Cloudflare — delivers the site and protects it from attacks; it sees your IP address and request details.
- Map and data providers — your browser loads map tiles, imagery and elevation directly from Google, Esri, OpenTopoMap, OpenFreeMap and Amazon Web Services (Terrain Tiles), and place search from Photon (komoot) and Nominatim (OpenStreetMap Foundation). These providers see your IP address and the map areas you view.
- Our hosting provider (netcup) — runs our server and database.
Some of these providers are in the United States; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
You can access, correct, export or delete your personal data, object to processing based on legitimate interest, and complain to your data protection authority. Delete your account (and with it your data) from your account page, or email us for anything else — we answer within 30 days.
Children
Tiny Topo isn’t meant for children under 16, and we don’t knowingly collect their data.
Changes
If we change this policy in a way that matters, we’ll say so on the site before the change applies.