Privacy Policy

Photo Op Planner helps you plan photo trips: stops, routes, and the best light. This page explains what it stores, who else sees data when you use it, and the choices you have.

What we store

• Account: your email address and a salted hash of your password (never the password itself).
• Your trips: trip names, dates, stops and their coordinates, notes, shot lists, and the photos you upload to a stop.
• Share links: if you create a share link, anyone who has it can see that trip's stops with their exact locations, times and light preferences, and each stop's shot notes and shot checklist including which items are ticked (but not photos or your private stop notes) until you turn the link off.
• Settings: display preferences such as theme, text size and time format.

On your device

• A sign-in cookie that keeps you logged in (up to 30 days). It is required for the app to work; we use no advertising or analytics cookies.
• Browser storage (localStorage) for your settings and for offline copies of your trips. Signing out on a device clears its offline copies; copies on another device are cleared when you next sign out or visit the sign-in page there, so remove them in Settings if you lose a device.
• A small service-worker cache so the offline page and app assets load without a connection.

Services that receive data

To do its job the app sends limited data to these providers. We do not sell your data or use it for advertising.

• Hosting and database (Vercel, Turso) store the account and trip data above. Vercel Blob stores uploaded photos.
• Mapbox draws the map and provides routes and place search. It receives the map areas you view, coordinates for directions, search text, the name of a trip that has no stops yet (to centre the map on it), and your browser's IP address.
• Open-Meteo provides weather. It receives the coordinates (to about 1 km) of stops and suggested places you view, and the dates involved; for dates far ahead it is asked about the same date in past years.
• OpenStreetMap / Overpass and Wikimedia Commons (and Flickr, if enabled) supply nearby places and photo counts. They receive the area being searched, not your identity.
• Wikimedia Commons, Wikipedia (and Flickr, if enabled) also find a photo for each place you add or pick from the suggestions. They receive the name and coordinates of that place (typically not for a dropped pin that is only a street address or coordinates), and no account details.
• Images for places may load directly from Mapbox, Wikimedia or Flickr servers, which see your IP address like any website.
• Abuse protection: to limit repeated requests, our database briefly keeps counters keyed by your account or by your IP address (IPv6 addresses shortened, login-failure counters using only a hashed form). They are removed when their time window (at most an hour) ends.

Security

Passwords are hashed, traffic uses HTTPS, and access to a trip requires being its owner or having its share link. No system is perfectly secure, so use a unique password. "Sign out on all devices" in Settings ends every session.

Retention and deletion

We keep your data while your account exists. You can delete your account yourself in Settings (“Delete account”, confirmed with your password); this permanently removes your account, trips, stops and uploaded photos. To get a copy of your data, contact us using the link below. Deleting an individual trip or photo in the app removes it too. Backups kept by our hosting providers may take a short time to expire.

Children

The service is not directed to children under 13 and we do not knowingly collect their data.

Changes

If this policy changes, the date above will change. Material changes will be noted in the app.

Contact

Questions or requests: open an issue on the project page (do not post private information there; say you want a private reply and we will arrange one).