Last updated 29 September 2026
Mapae turns a trip into a short map film. It is made by Micha Roessler LLC,
a Wyoming limited liability company, which is the controller of the personal data described
here. Questions, or any request below: mapae@mapinsy.com.
Registered address: 30 N Gould St, Ste N, Sheridan, WY 82801, USA
The short version: your films and your trips stay on your phone. The film is made in your browser, not on our machines. To find places and draw roads, what you search for and the points of your route pass through our server — we do not connect them to you. We hold your email address only if you buy Mapae or sign in, and we only send you news if you say yes.
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Your email address — typed into the payment form (or passed on by Apple Pay / Google Pay), or used to sign in | Your purchase belongs to it, and you sign in with it on other phones | Performance of a contract | Until you delete your account |
| Your travel partner’s email address — only if you share your purchase with them | So they can sign in with it and use what you bought; we email them once to say so | Performance of our contract with you; for your partner, legitimate interest in giving them what you shared | Until you stop sharing or delete your account. Your partner can ask us to delete it at any time |
| How many free films you have used, and what you bought | So two free films means two, and a purchase works wherever you sign in | Performance of a contract | Until you delete your account |
| A random device ID in your browser | The free-film count before you sign in, and which of your devices a purchase is unlocked on | Legitimate interest in not giving the product away without limit | In your browser until you clear Mapae’s site data; on our server until you ask us to delete it |
| Your marketing consent: its wording, when you gave it, and the IP address it came from | To prove we were allowed to email you | Consent, and our legal need to evidence it | Until you switch it off, unsubscribe or delete your account; after switching off we keep only the date you did so |
| Payment records (amount, date, Stripe IDs, billing email) | Selling you something | Contract, and tax law | As long as tax law requires, typically 7–10 years |
| Lookups: places you search for or tap on the map, Google Maps links you paste, outlines, and the two ends of each road or sea route | To find places and draw your route, quickly | Legitimate interest in answering what you asked for | In a shared cache that records no one: 7 days for Maps links, 30 for searches and map taps, 90 for roads, 180 for outlines and sea routes |
| Anonymous counters (“a film was exported today”) | To see whether the product works | Legitimate interest | Rolling, no IDs, no IPs |
| Server logs including IP address | Keeping the service up and stopping abuse | Legitimate interest | Short-lived |
We do not hold your trips or your films. They are stored in your own browser and never uploaded. What does pass through our server are the single lookups a trip needs (above), kept in a shared cache that does not record who asked. We do not profile you, we do not advertise to you, and we do not sell or share your data with anyone for their own purposes.
One cookie, and only after you buy or sign in: it remembers that you are signed in, for up to 400 days or until you sign out. It is strictly necessary for that, so it needs no consent banner. There are no analytics or advertising cookies on this site.
Mapae also keeps a few things in your browser’s own storage: your trip, your last few places, small settings, the random device ID described above, and marks that stop an anonymous counter from counting the same phone twice. They stay in your browser; apart from the lookups described above, the only one sent to us is the device ID.
When you open the payment form — and only then — the form is loaded from Stripe, inside
this page. Stripe sets its own cookies (such as __stripe_mid and
__stripe_sid) and collects device signals to detect fraud and keep the payment
secure; this is necessary for a payment you asked to make. Nothing from Stripe loads while
you are just making films. Stripe’s cookie policy.
We email you about new features and travel-film tips only if you said yes — an unticked box when signing in, or the switch under “?” → News and tips by email. Buying Mapae never signs you up. Every such email has an unsubscribe link that works in one click, and switching it off is as easy as switching it on. It does not affect anything else.
Sign-in codes and receipts are not marketing — you get those because you asked for a code or bought something, and they do not stop when you unsubscribe.
While you use Mapae your browser also talks directly to OpenFreeMap for map tiles; we do not control that connection, and like any web request it carries your IP address and which tiles you look at.
To answer searches, map taps, outlines and road routes, our server asks Photon (komoot), Nominatim (OpenStreetMap Foundation) and FOSSGIS OSRM. When you paste a short Google Maps link, our server opens it at Google to read the places in it. They receive only the search, the point, the link or the route ends — from our server, never with your email or your IP address.
Our server is a Hostinger machine in a data centre in India. Micha Roessler LLC is in the United States, and Stripe is a US company, so data reaches India and the US. Those transfers rely on the European Commission's Standard Contractual Clauses with the processors concerned.
If the GDPR applies to you, you have the right to access your data, correct it, delete it, restrict or object to its use, take it elsewhere, and withdraw consent at any time. You can delete your account yourself in the app: “?” → Delete my account, which removes your address and your account immediately and stops a monthly or yearly plan from renewing. Payment records stay, because tax law requires that; they are not used to contact you. The random device ID and its film count stay on our server until you ask us to delete them.
For anything else, email mapae@mapinsy.com. You also have the right to complain to your local data protection authority.
Mapae is not intended for children under 16, and we do not knowingly collect their data.
If this policy changes in a way that matters, the app will say so before the change applies to you.
← Back to Mapae