# Privacy Policy

Effective: 6 November 2026

GPS Map Camera is a client-side web application. It does not operate a backend,
user account system, analytics service, or database. This policy explains what
the app does with camera, location, and network data.

## Data processed on your device

- **Camera:** The camera stream is used only to render the live preview and to
  create the photo you capture. Frames are processed in the browser.
- **Location:** With your permission, the browser provides your current
  coordinates. The app uses them for the stamp, mini map, QR link, and
  reverse-geocoded address.
- **Stamped photos:** Captures are held in an in-memory session gallery. They
  are lost when the tab is closed or reloaded unless you download or share
  them.
- **Settings and stamp text:** Theme, layout, orientation, opacity, badge,
  note, and similar settings are stored in your browser's `localStorage`.
  The app does not send this data to a server.
- **Downloads and sharing:** Saving or sharing a photo is initiated by you and
  is handled by your browser or operating system.

The app does not upload your photos, location, or settings to a GPS Map Camera
server. There is no GPS Map Camera server.

## Network requests

The app loads open-source libraries and fonts from public CDNs, and requests map
and geocoding data from third-party services. Those providers receive normal
web request information such as your IP address, user agent, and referring
page. A reverse-geocoding request also includes the coordinates being looked up.

Network destinations include:

- Google Fonts (`fonts.googleapis.com`, `fonts.gstatic.com`) for Inter and
  Material Symbols.
- unpkg (`unpkg.com`) for Leaflet.
- cdnjs (`cdnjs.cloudflare.com`) for qrcodejs.
- jsDelivr (`cdn.jsdelivr.net`) for the optional Liquid Glass renderer.
- OpenStreetMap tile servers (`tile.openstreetmap.org`) for the standard map.
- Esri ArcGIS World Imagery (`server.arcgisonline.com`) for the satellite map.
- OpenStreetMap Nominatim (`nominatim.openstreetmap.org`) for reverse
  geocoding.
- GitHub Pages (if you use the hosted demo) for the page itself.

Each provider has its own privacy policy and terms. See
[THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for links. In particular,
map tiles and reverse-geocoding requests necessarily reveal the location being
viewed or looked up to those providers. The QR code only contains a Google Maps
URL; the app does not contact Google Maps unless you scan or open that URL.

## Permissions and retention

- Camera and location access are requested by the browser and can be denied or
  revoked in browser or operating-system settings.
- Captures are kept in memory only for the current tab session.
- Local settings remain in `localStorage` until you clear site data or the
  browser removes them.
- Downloaded photos are stored wherever your browser or device saves them.
- The hosted demo may be subject to GitHub's server logs under GitHub's
  policies.

## Security

Use the hosted app over HTTPS. Camera and geolocation access generally require
a secure context (`https://` or `localhost`). No method of transmission or
storage is completely secure, and the project is provided without a guarantee
of security or fitness for a particular purpose.

## Children

The app is a general-purpose camera tool and is not directed to children. A
guardian should supervise any use that involves a child's location or images.

## Changes and contact

This policy may be updated as the app changes. The current version is kept in
this repository. For privacy questions or requests, open an issue at
<https://github.com/0xMe/gps-cam/issues>.

This policy describes the app's behavior; it is not legal advice.