THE MAP CHALLENGE

Privacy Policy

Last updated: 23 July 2026

The Map Challenge is an independent worldwide online project. For privacy questions or requests, contact themapchallenge@proton.me.

Data we process

Depending on how you use the project, we may process an optional display name and email address, selected country, selected map coordinates, approximate country of origin, contribution amount, transaction reference, crypto asset, a locally generated participant identifier, contact-form messages, and limited technical information.

For security and abuse prevention, we derive a temporary pseudonymous rate-limit identifier from an IP address and rate-limit requests. This identifier expires after 15 minutes; we do not keep the IP address in clear in our rate-limit records. Card details are processed by Stripe; we do not receive or store full card numbers.

Why we use data

We use information to operate the map and ranking, process and verify contributions, respond to messages and payment requests, protect the service from abuse, prevent fraud, and maintain reliable records. We process payment and contact information when needed to provide the requested service, and use limited technical information where necessary to protect the project and its users.

What is public

The selected map coordinates may appear publicly as a marker. The public map and ranking show country points and, where applicable, a Captain display name. We do not publicly display contribution amounts, email addresses, transaction references, approximate country of origin, IP addresses, or technical identifiers.

Service providers

We use Cloudflare to host and protect the website, Stripe to process card payments, and Resend to deliver contact-form messages. Crypto transactions are processed on public blockchain networks. These providers may process data as necessary to provide their services and may operate internationally.

Retention

We keep contribution and payment-related records for as long as reasonably necessary to operate the project, handle disputes, prevent fraud, and meet applicable legal obligations. Contact messages are kept only as long as needed to respond or follow up. Security rate-limit identifiers expire after 15 minutes.

Your choices and rights

You can choose not to provide an optional display name or email address. You may request access, correction, deletion, restriction, objection, or a copy of personal data that we hold about you by emailing us. We may need information to verify that a request relates to your data. You may also have the right to complain to the relevant data-protection authority.

Updates

We may update this policy when the project or legal requirements change. The latest version will always be posted on this page.