CFH operates this MapForHuman early-access marketing site. Contact: private contact form. This notice covers this website; linked CFH products and the protected map studio have their own terms.
Essential preview operations
A signed, HttpOnly first-party session cookie lasts up to 30 days. It separates preview visitors, protects form submissions, limits abuse, and attributes delivered bytes and requests for cost accounting. A visitor identifier represents one browser, not a verified person. The journey planner requests location only when you start GPS guidance; other pages do not. We do not request camera or microphone access. Imported tracks and drawings stay in this browser tab. Saved stop favorites stay in this browser’s local storage; they are not sent as analytics. Transit and road-work data are fetched by our server, so agency feeds receive no visitor location.
We keep request counts, response bytes and service response time by browser session and day. Response time is not CPU consumption. Azure may process network addresses in infrastructure logs. The application uses a short-lived keyed address hash in memory for rate limits and does not save raw IP addresses, full browsing URLs, or precise locations.
Optional analytics
Only if you choose “Allow analytics,” we record page categories, map controls, video interactions, referral campaign tags and calls to action. Declining leaves the preview and forms available. Browser Global Privacy Control and Do Not Track default analytics to off. We use no advertising pixels, fingerprinting or third-party analytics scripts. Withdrawing consent removes this browser’s saved optional events.
Forms and updates
We store the email, name, organization, message, pledge interest, selected package and consent choices you submit. Contact about your request is required to process that request. Launch marketing is a separate optional choice, unchecked by default. We do not automatically email you or share your address with sponsors or GreenSwap. Unsubscribe by contacting the team; promotional sends require consent review and a working unsubscribe process.
Retention and access
Session profiles: 30 days. Operational usage and analytics events: 90 days. Leads and pledges: 180 days unless you ask us to remove them sooner or a continuing relationship needs a new agreement. Admin audit records without message contents: 365 days. Cleanup runs on active site traffic. Azure SQL backup retention is managed separately and deleted records age out of backups. Authorized CFH administration and infrastructure providers process records for these purposes.
Your choices
Use the private contact form to request access, correction, withdrawal or deletion using the email you submitted. The request goes to CFH administration, and is not published. You can also delete this browser’s site data below, including its requests and pledges. This does not remove separate records submitted in another browser.
Age and sensitive information
This site is intended for adults. Do not send sensitive personal information in messages. No user-generated reports are publicly published through these marketing forms.
Business trial requests
Business contact name and email remain private to the CFH team. Public business fields, an approximate business pin and reviewed promotional content are published only after approval and the applicant’s permission. Pending previews belong to the submitting browser session. Requests are retained up to 180 days; delete them through this browser’s data-removal control or request verified assistance via feedback. Trial map overlays expire after 30 days from approval. Optional advertising interaction analytics require consent and are not shared as individual visitor histories.
Business location search and bot checks
Business-name searches use a bounded prepared Seattle OpenStreetMap/Protomaps index, not a complete or continuously verified directory. When you press Search in address mode, the public address query is sent through our server to King County GIS. We do not send your contact fields, session identifier or device location to the County. Search text is sent in a request body to our site and is not stored as analytics; public address results may be held in a short-lived server memory cache. Provider infrastructure can log its own requests.
Registration uses self-hosted ALTCHA proof-of-work verification. Widget scripts and workers are served by this site, with no external CAPTCHA verifier, behavioral pointer/scroll signature or additional tracking cookie. A signed challenge is bound to this browser session, expires after 15 minutes and may authorize one new submission. Short-lived replay-prevention records are retained up to one day and removed with this browser’s data. Bot checks and submission limits reduce automation; they do not guarantee a human identity.
Developer accounts and verification emails
We use your email to send requested six-digit verification codes and sign you in. Azure Communication Services processes these transactional messages in the United States. Email open/click tracking is disabled. Signing up does not subscribe you to marketing. Codes expire after 10 minutes, have five attempts and are stored as keyed hashes. Sign-in sessions use a separate HttpOnly cookie and expire after 12 hours.
API keys are shown once and stored as keyed hashes. We retain your account email, verification/terms dates, key metadata and account-level request/delivered-byte counters for service delivery, abuse prevention and cost accounting. Essential usage does not depend on optional marketing analytics. No request payload, precise location or API key is sent as analytics. API keys are private server credentials.
Delete your developer account from the portal to revoke its keys and sessions and remove its live account records. Developer usage is retained up to 90 days and account/key records up to 180 days. Verification attempts and sessions are cleaned within a day; throttle counters within two days. A nonreversible keyed email fingerprint and trial dates remain up to one year to prevent trial resets. Backups expire separately. Browser-only marketing-data deletion does not delete a signed-in developer account.
Journey planning and optional GPS
Start/destination coordinates and public place/address queries are processed by our self-hosted routing/search service. We do not persist query text, endpoints, calculated journeys or GPS trails. Essential per-browser or developer-account counters retain operation counts and elapsed response time for up to 90 days, alongside existing delivered-byte measurements. Road/transit engines run locally on the server; public source providers receive shared data-feed requests, not individual journey queries.
GPS starts only after you press Start GPS guidance and accept your browser’s location permission. Positions are processed in this tab. A fresh current position and destination are sent to MFH when automatic road rerouting is needed. No continuous GPS stream is uploaded. Hiding the tab or stopping guidance clears the location watcher. Spoken instructions use your browser/device voice service; availability and processing depend on your device. Journey data is not saved as optional analytics.
Saved Art Walk stops
The Art Walk directory saves up to six public venue IDs in this browser when you choose stops. The shortlist is not uploaded as a profile. Calculating a walk sends the selected endpoint coordinates to our existing directions service; source, usage limits and retention rules remain those stated above. Clear stops, clearing browser storage, or using this page’s delete-data action removes the saved shortlist.
MapForHuman