Mirante

Privacy & data

Mirante is a community environmental map, run from the EU. Here's what data we hold, why, how long we keep it, and your rights under the GDPR.

What we collect

  • An anonymous visitor ID stored in your browser, so reports you make before signing up can be linked to you if you create an account later. It's a random string, not your name.
  • The reports you send: location (latitude/longitude), an optional address and category, and an optional photo. We re-encode photos on upload and strip out embedded metadata, including GPS.
  • If you create an account: your email address and a securely hashed password. We never store your password in plain text.
  • Basic request logs (IP address, browser user-agent) kept briefly to protect the service against abuse.

How long we keep it

We keep personal data only as long as we need it. Submissions rejected in moderation are deleted automatically after 90 days. When a published report is taken down, its photo goes with it. Approved reports stay on the public map (that's the whole point of Mirante) until you ask us to erase them or they're taken down.

Your right to erasure

You can ask us to erase your data (GDPR Article 17). When you do, we delete your account, your sessions, and any unpublished or rejected submissions, and we anonymize your approved reports: the point stays on the map, but your account link, the address, and the photo are removed. To make a request, email [email protected].

Who else processes your data

We use a small number of EU-based processors to run the service:

  • Brevo: transactional email (verification, password resets, moderation notices). EU.
  • PostHog (EU cloud): privacy-friendly analytics and server logs.
  • Cloudflare R2: stores report photos. EU (Western Europe).
  • MapLibre with Carto basemap tiles: renders the map in your browser.

Cookies & local storage

We use one essential cookie to keep you signed in (an httpOnly session cookie). Your browser's local storage holds the anonymous visitor ID and your light/dark theme choice. No advertising or third-party tracking cookies.