privacy policy

Account data. Your email address, which is your sign-in (magic link, no password) and how we reach you about the service.

Content you create. Maps, places, names, and notes you or your friends add, including the display name attached to places added through a friend link.

Scan requests. The YouTube and TikTok links you submit and the places our scan extracts from them, so we can show you the results and keep your free-tier scan count.

Usage data. Product analytics events (for example: a scan started, a map created, a friend link opened) collected with PostHog on its EU cloud in cookieless mode - no analytics cookies, no cross-site tracking, no ad profiles.

Technical data. Standard server and hosting logs (IP address, browser type, timestamps) kept by our hosting provider for security and debugging.

To run the service: sign you in, store your maps, process your scans, deliver transactional email (sign-in links, receipts), count your free-tier limits, and process payments. Analytics are used only to understand how the product is used and where to improve it - never to sell or share your data for advertising.

We share data only with the providers the service runs on:

• Supabase - database and authentication
• Vercel - hosting and content delivery
• Resend - transactional email (sign-in links, receipts)
• Creem - payment processing and merchant of record; they receive what a purchase requires, and we never see your card number
• PostHog - product analytics (EU cloud, cookieless)
• ImprovMX - forwarding for our support@cantmiss.io mailbox
• YouTube / TikTok - when you submit a video link, we request the video's public metadata from the platform to extract places

Each provider processes data under its own privacy terms. We don't sell your personal data to anyone.

Maps you share through a friend link can be viewed and added to by anyone who has the link, and each added place displays the name of the friend who added it. Only share links with people you want to have that access. You can regenerate or revoke a link at any time, which retires the old one.

We use only what the service needs to function: an authentication session and small amounts of browser local storage (for example, to hand an anonymous scan to your account when you sign up). Our analytics run cookieless. We don't use advertising or tracking cookies.

You can request access to your data, a correction, a copy in a portable format, restriction or objection to processing, and deletion of your account and data. Email support@cantmiss.io from your account address and we'll handle it - deletion requests are completed within 30 days. If you're in the EU/UK you also have the right to lodge a complaint with your data protection authority.

We keep your account and content while your account is active. Analytics events are kept in aggregate form. When you ask us to delete your account we remove your personal data and content from our systems within 30 days, except records we must keep by law (for example, payment records held by our merchant of record).

Our providers may process data in countries other than yours. Our analytics stay in the EU. Where transfers outside the EU/UK occur, they rely on the providers' standard safeguards.

Data is encrypted in transit, access is limited to what the service needs, and sign-in is passwordless by design. No system is perfectly secure; if we ever learn of a breach affecting your data, we'll tell you and the authorities as the law requires.

The service isn't directed at children under 16, and we don't knowingly collect their data. If you believe a child has signed up, email us and we'll delete the account.

We may update this policy as the service evolves. For material changes we'll give reasonable notice on the site or by email before they take effect. The "last updated" date above always shows the current version.

Privacy questions, requests, or complaints: support@cantmiss.io.