Privacy

Minnekart is a service of HEIN HTET OO (ABN 63 345 765 300), based in Australia. Privacy isn't a section we bolted on — it's the reason the product is shaped the way it is. Here is exactly what happens to your data.

What we collect

• Your account: name, username, email address, and your password stored only as an Argon2 hash. We never see or store the password itself.
• What you put in: the memories you create — place, country, coordinates, dates, notes — and the photos you upload.
• IP addresses: used only to rate-limit signups, logins and password resets so the service can't be flooded. They aren't used to profile you.

What we don't collect

• No analytics and no ad trackers. There is no Google Analytics, no pixel, no session recorder. The only third-party code that ever loads is Cloudflare Turnstile on the signup form and Paddle on the checkout.
• No location tracking. Minnekart never asks for your device location, and we have committed to never building live GPS tracking. The only coordinates we hold are the places you deliberately pin.
• No photo metadata. Your photos are re-encoded in your browser before they're uploaded, which strips the embedded EXIF data — including any GPS coordinates your camera recorded. The one thing we read from it is the date the photo was taken, so your memories can sort themselves.

Cookies

One cookie, called session, which keeps you logged in. It is HttpOnly, SameSite=Lax, sent only over HTTPS in production, and it lasts 30 days. There are no tracking or advertising cookies, so there's nothing to consent to.

Where your photos live

Photos are stored in a private Cloudflare R2 bucket that isn't publicly readable. When you or someone with your share link views a photo, we mint a signed URL that expires after about an hour. Your globe and your memories are private by default — nothing is visible to anyone else until you create a share link, and you can revoke a share link at any time.

Who else touches your data

We keep the list of companies involved as short as we can. Each one does one job:

• Vercel — hosts the app.
• Neon — the Postgres database holding your account and memories.
• Cloudflare — R2 stores your photos; Turnstile checks that signups are human.
• Resend — sends the emails you need (verification codes, password resets, invites).
• Paddle — takes payments as merchant of record. Card details go to Paddle, never to us; we only ever store a customer ID and whether your plan is free or paid.
• OpenStreetMap — when you search for a place, that search text is sent to their geocoding service to turn it into coordinates. Nothing about your account goes with it.

We don't sell your data, and we don't hand it to anyone else unless the law compels us to.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Under the Australian Privacy Principles you can also complain to the Office of the Australian Information Commissioner if you think we've mishandled it.

Deleting your account

You can delete your account yourself at any time, from Settings → Delete account. It removes your account, your memories and your photos straight away — there is no waiting period and no way to undo it. Backups roll over within 14 days after that. If you would rather we did it for you, email hello@minnekart.com from your account address and we will delete everything within 30 days, then confirm once it is done.

Changes to this page

If what we do with your data changes, we'll update this page and the date at the top, and email you if the change is significant.

Contact

HEIN HTET OO (ABN 63 345 765 300), Australia — hello@minnekart.com.