Privacy Policy

Last updated: May 30, 2026

What we collect

Account information: your email address, optional display name, and a password hash (if you sign up with email and password). We never see your raw password — only an irreversible bcrypt hash.
Sign-in providers: if you sign in with Google, we receive the email, name, and profile image that Google sends. We do not request additional scopes.
Ratings you submit: the bathroom, score, optional sub-scores, and any comment you write are stored with your user id and shown publicly alongside your account's display name (if you set one) or as anonymous.
Bathrooms you add: name, location, address, and notes are stored along with your user id and shown publicly.
Location: when you grant permission, your browser or device sends a one-time GPS reading to your local app so the map can center on you. We do not store your live location on our servers.
Server logs: standard request logs (IP address, user agent, path, timestamp) are retained for up to 30 days for security and debugging.

No tracking pixels, analytics SDKs, or advertising networks.
No health information. We are not a medical service, and you should never enter symptoms, diagnoses, or anything you don't want shown publicly.
No selling of your information to third parties. Ever.

Bathroom locations are sourced from OpenStreetMap via the Overpass API. We do not send your location to OpenStreetMap or any other third party.

You can delete your account or any rating you've submitted at any time. Email [email protected] to request deletion or data export.

We'll update the date at the top of this page when the policy changes. Material changes will be announced on the site.