Mirante

Privacy & data

Mirante is a community environmental map, run from the EU. Here's what data we hold, why, how long we keep it, and your rights under the GDPR.

What we collect

  • An anonymous visitor ID stored in your browser, so reports you make before signing up can be linked to you if you create an account later. It's a random string, not your name.
  • The reports you send: location (latitude/longitude), a photo, and an optional address and category. We re-encode photos on upload and strip out embedded metadata, including GPS.
  • If you create an account: your email address and a password, which we store scrambled in a form that can't be reversed, so no one can read it, not even us.
  • Basic request logs, including your IP address and which browser you're using, kept briefly to protect the service from abuse.

How long we keep it

We keep personal data only as long as we need it. Submissions rejected in moderation are deleted automatically after 90 days. When a published report is taken down, its photo goes with it. Approved reports stay on the public map (that's the whole point of Mirante) until you ask us to erase them or they're taken down.

Your right to erasure

You can ask us to erase your data (GDPR Article 17). When you do, we delete your account, your sessions, and any unpublished or rejected submissions, and we anonymize your approved reports: the point stays on the map, but your account link, the address, and the photo are removed. To make a request, email [email protected].

Other services we use

We rely on a handful of trusted EU companies to keep Mirante running:

  • Brevo sends our emails: account verification, password resets, and moderation notices. Based in the EU.
  • PostHog records errors and server logs so we can spot and fix problems. EU cloud.
  • Cloudflare R2 stores the photos people add to reports. Hosted in the EU.
  • MapLibre and Carto draw the map you see in your browser.

Cookies & browser storage

We use one essential cookie to keep you signed in. Your browser also remembers your anonymous visitor ID and your light/dark theme choice, so they carry over between visits. We don't use any advertising or tracking cookies.