Privacy Policy

Last updated: October 23, 2026

1. Introduction

Welcome to Moving Polygons ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our service.

2. Information We Collect

Account Information

Accounts are managed by our authentication provider, Clerk. When you create an account, Clerk processes your email address, username, and (if you sign in with a password) your password; we never see or store your password. We store your account ID and your public username together with the maps you create.

Content You Create

We store the maps and polygon data you create, including names, descriptions, and geographic coordinates.

AI Assistants (Claude Connector and Skill)

You can connect Claude or another AI assistant to Moving Polygons through our MCP connector at www.movingpolygons.com/mcp. Searching and reading published maps through the connector works without signing in and involves no personal data. When the assistant needs your account, you sign in through Clerk (OAuth). We then receive an access token that identifies your account; we use only your account ID from it. With your sign-in, the assistant can read your public username, plan and maps, and create, change, publish or unpublish maps in your account when you ask it to.

We do not receive your conversations with the assistant. We only receive the requests it sends to our tools, such as the content of a map to save. Before a map's content is replaced, we keep a backup copy of the previous version in our file storage. Our map-building skill runs inside the assistant's own environment and sends data only to Moving Polygons, when it uploads a map you asked it to make. The assistant's provider (for example Anthropic for Claude) processes your conversations under its own privacy policy.

Payment Information

We do not collect any payment information. Moving Polygons is free to use during the beta and does not offer paid plans. If we introduce paid plans in the future, we will update this policy before any payment data is processed.

Contact Form and Spam Protection

When you use our contact form, we process your name, email address, and message in order to answer you. Your message is delivered to us by email through our email provider, Mailtrap. To protect the form against spam and abuse, we use Cloudflare Turnstile, which processes technical information about your device and browser (such as your IP address and browser characteristics) to tell people and automated bots apart. Cloudflare processes this data in accordance with its own privacy policy.

Bot Protection by Clerk

Our authentication provider, Clerk, runs on every page, also when you are not signed in. To protect sign-ups and sign-ins against automated abuse, Clerk's bot protection collects technical information about your device, browser and network connection (such as your IP address and browser characteristics). As part of this check, your browser makes a few test connections to Clerk's servers on different network ports. Clerk stores two random identifiers in your browser's local storage (__clerk_protect_pid and __clerk_protect_st), and Cloudflare, which protects Clerk's servers, sets the bot-management cookies __cf_bm and _cfuvid. We process this data under our legitimate interest in keeping the Service secure. It is not used for advertising or to follow you across other websites.

Map Delivery and Mapbox Telemetry

Maps are drawn with Mapbox. When you open a page with a map, your browser loads map tiles and styles from Mapbox and sends Mapbox a short map-load event (to events.mapbox.com). Mapbox uses these events to count map loads for billing and to maintain its service; they include your IP address, browser information and a random identifier that Mapbox stores in your browser's local storage (mapbox.eventData.*). Mapbox requires these events, so they cannot be switched off. Mapbox processes this data under its own privacy policy.

Usage Data (Client-Side Analytics)

With your consent, we use PostHog to collect anonymous usage analytics via cookies to improve our service. This includes:

  • Pages visited
  • Features used
  • Device and browser information

You can opt out of client-side analytics at any time via our cookie settings. See our Cookie Policy for details.

We also use Vercel Web Analytics for aggregate page-view statistics. It does not use cookies and does not track you across websites.

Feature Usage Data (Server-Side)

When you are logged in, our servers automatically log which features you use as part of providing the Service. This includes actions such as creating maps, publishing, and exporting content. This data is linked to your account and is processed under our legitimate interest in understanding how the Service is used, maintaining and improving its functionality, and deciding which features to develop next. This server-side logging does not use cookies and cannot be disabled separately, as it is integral to the operation and development of the Service.

Visit Statistics (Server-Side, Cookieless)

To count visits and see which pages and maps are popular, our servers record each page request: the page, the time, the referring website, your country (derived from your IP address), your device type, and whether the visitor is a person or a known crawler (based on the browser's user agent). If you are logged in, the request is linked to your account. We do not store your IP address. Instead we store a short code derived from your IP address, browser and a secret that changes every day, so a visitor can be counted once per day but cannot be recognised on another day or traced back to an IP address. The same applies to requests made through our MCP connector, where we also record which tool was used, whether it succeeded, and the name and user agent of the app that made the request (for example Claude). This does not use cookies and is processed under our legitimate interest in running and improving the Service.

3. How We Use Your Information

We use your information to:

  • Provide and maintain our service
  • Authenticate your account
  • Display your published maps to other users
  • Respond to your inquiries via the contact form
  • Protect the Service and our contact form against spam and abuse
  • Improve our service through analytics

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract performance: Processing your account data and content is necessary to provide the Service you signed up for.
  • Legitimate interest: Server-side feature usage logging is processed under our legitimate interest in understanding how the Service is used and improving it. Spam protection on our contact form (Cloudflare Turnstile) is processed under our legitimate interest in keeping the Service free of abuse. You have the right to object to this processing (see "Your Rights" below).
  • Consent: Client-side analytics cookies are only placed with your explicit consent, which you can withdraw at any time.

5. Data Sharing

We do not sell your personal information. We may share your data with:

  • Service providers: our hosting and file-storage provider (Vercel, which also provides our cookieless web analytics), database host (Neon), analytics provider (PostHog, only with your consent), email provider (Mailtrap), spam protection (Cloudflare Turnstile), and map provider (Mapbox, which delivers the map tiles, receives map-load telemetry, and therefore receives your IP address and browser information)
  • Authentication provider: Clerk, for account authentication and management, and for bot protection on every page (see "Bot Protection by Clerk" above)
  • Public content: When you publish a map, it becomes publicly accessible along with your username

6. Data Security

We implement appropriate security measures including:

  • Authentication and password handling by a dedicated provider (Clerk)
  • HTTPS encryption for all data transmission
  • Secure database connections with SSL

7. Your Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Object to or restrict certain processing of your data
  • Withdraw consent for non-essential data processing at any time

To exercise any of these rights, please contact us through our contact form.

8. Cookies

We use cookies and similar technologies on our Service. For detailed information about the cookies we use, their purposes, and how to manage your preferences, please see our Cookie Policy.

In summary, we use:

  • Essential cookies and local storage: Required for authentication, bot protection, map delivery and core functionality. These cannot be disabled.
  • Analytics cookies: Used by PostHog to collect anonymous usage data to help us improve the Service. You can opt out of these via our cookie settings.

9. International Data Transfers

Your data may be processed by our service providers in countries outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete your personal data within a reasonable timeframe, except where we are required to retain it by law.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this privacy policy, please contact us through our contact form.

Latest from the Blog

View all →

How the Asian Hornet Spread Across Europe, 2004–2026: An Animated Map

An animated map of the spread of the yellow-legged or Asian hornet (Vespa velutina nigrithorax) across Europe: every area is coloured by the year the hornet was first recorded there, from a single introduction in south-west France around 2004 to most of western Europe by 2026, built from GBIF records, the UK government's confirmed sightings and published first records.

The Dance of the Dragons on One Map: Every Dragon, Army and Battle of the Targaryen Civil War

An animated tapestry map of the Dance of the Dragons, the Targaryen civil war of Fire & Blood: the Greens of Aegon II against the Blacks of Rhaenyra, with every dragon flying its missions, every army on the march and the realm changing colour from Viserys's death in 129 AC to Aegon III's coronation in 131 AC.

Middle-earth from The Hobbit to the Grey Havens: Every Journey and Battle on One Map

An animated ink map of Middle-earth that follows every company, rider and army of The Hobbit and The Lord of the Rings, from Thorin's company leaving Bag End in TA 2941 to the Ring-bearers sailing West from the Grey Havens in 3021, after the dates of Tolkien's own Tale of Years.