Privacy Policy

1. Who we are

WikiToilet (wikitoilet.com) is a free, community-driven map of public toilets and hygiene amenities. This policy explains what personal data we collect when you use the app, how we use it, and your rights.

2. Data we collect

• Account data — email address and a hashed password when you register. Display name and avatar if you set them.
• Contributions — toilet locations, reviews, photos, tags, and edits you submit. These are attributed to your account.
• Location — your device location is used only to centre the map and find nearby toilets. It is never stored on our servers.
• Feedback — the text and type of any bug report or feedback you submit via /feedback.
• Usage data — standard server logs (IP address, browser type, pages visited) retained for up to 30 days for security and debugging.

3. How we use your data

• To operate the app and show toilet information on the map.
• To attribute contributions to your profile and calculate your points/level.
• To send transactional emails (e.g. password reset) — no marketing emails.
• To investigate abuse, spam, or inaccurate data reports.

We do not sell your data or use it for advertising.

4. Third-party services

• Supabase — hosts our PostgreSQL database and photo storage. Data is stored in the EU (AWS eu-west-1).
• Vercel — hosts the application. Serves requests via edge nodes worldwide.
• OpenStreetMap / Overpass API — map tiles and toilet data are fetched from OSM servers. Your location is not sent to OSM.

5. Cookies and storage

We use a single session cookie (next-auth.session-token) to keep you logged in. No tracking or advertising cookies are set. Local storage is used to cache map preferences (filter settings) on your device only.

6. Data retention

Your account data is kept for as long as your account is active. If you delete your account, your personal data (email, display name, avatar) is removed. Your contributions are anonymised and remain on the map to preserve the community dataset.

7. Your rights

You can view and edit your profile at any time via /profile. You can delete your account from the same page. To request a copy of your data or raise a concern, contact us at the address below.

8. Children

WikiToilet is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us.

9. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any changes. Continued use of WikiToilet after a change constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Open an issue on our GitHub repository or use the feedback page.