Privacy Policy

Last updated: 13 September 2026

Mapster ("we", "us", "our") operates Mapster at https://mapster.com.au. This policy explains how we collect, use, and disclose personal information under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

Who we are

• Business: Mapster (sole trader)
• ABN: 68 740 433 739
• Contact: Contact form

Information we collect

Account and contact

• Email address and password (stored by our auth provider; we do not store plain-text passwords)
• Name, email, and message you submit on the contact form or when reporting a map issue
• Name or delivery details you provide at checkout (processed by Stripe)

Orders and designs

• City, country, map settings, poster configuration, and render outputs linked to your session or account
• Order history, payment status, and shipping details

Technical and usage

• Browser local storage: a guest session id (`mappy-session-id`), optional location history in the designer, and UI preferences
• Authentication cookies: set by Supabase when you sign in (required for your account session)
• Security: Cloudflare Turnstile on sign-up, login, guest renders, the contact form, and render issue reports; we may store a hashed copy of your IP address for abuse prevention and daily render limits for guests
• Server logs: standard request metadata via Cloudflare (e.g. IP, user agent) for security and operations

We do not use Google Analytics or advertising trackers on Mapster.

How we use information

• Provide the designer, map previews, print PDF generation, and checkout
• Process payments and fulfil orders
• Send transactional emails (order receipts, render-ready notifications, account messages, and replies to contact or issue reports)
• Prevent abuse (rate limits, CAPTCHA, IP hashing for guests)
• Improve reliability and support

Disclosure to service providers

We use trusted providers who process data on our behalf:

We do not sell your personal information.

Cookies and local storage

Essential cookies

• Supabase auth cookies (`sb-*`): keep you signed in. Required if you use an account.
• Cloudflare Turnstile: security challenge cookies when CAPTCHA is shown.

Local storage (not cookies)

• Guest session id: links your designs and renders before you create an account
• Designer history: recent cities you typed (stored only in your browser)
• Cookie notice dismissal: remembers that you closed our cookie information banner

You can clear cookies and local storage in your browser settings. Clearing auth cookies will sign you out. Clearing the guest session id may disconnect guest designs from your browser until you sign in and claim them.

We do not use non-essential marketing cookies. In Australia, our cookie notice is informational for essential storage only.

Retention

• Account data: while your account is active and as needed for legal and tax records
• Orders: as required for Australian tax and consumer law (typically 7 years for financial records)
• Guest render usage logs: for quota enforcement, rotated on a daily basis where applicable
• Rendered poster files: stored until you delete designs or we remove inactive data per our operational policy

Your rights

You may request access to or correction of personal information we hold about you. Use the contact form.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

International transfers

Some providers (e.g. Supabase, Stripe, Cloudflare) may process data outside Australia. We use them under their standard contractual protections and only for the purposes described above.

Children

Mapster is not directed at children under 16. We do not knowingly collect their personal information.

Changes

We may update this policy. The "Last updated" date at the top will change. Material changes may be notified by email or a notice on the site.

Contact

Privacy questions: contact form