This policy covers mylasermap.com, run by MyLaserMap from Ontario, Canada. We follow Canada's privacy law (PIPEDA), and give the same rights to everyone, wherever they live. Questions or requests: support@mylasermap.com.
What we collect
Without an account you can frame and preview designs. The designing happens in your browser; we don't keep your designs, and we don't record who you are.
When you sign in with Google, we keep:
- your account: email address, name and profile picture from Google;
- your saved designs: their names, settings (place, size, layers, text you engrave) and preview pictures;
- share links you make: a snapshot of the design's preview and a picture of it for link previews, which anyone with the link can see;
- your credits, and a record of which places you've previewed and downloaded, so you're never charged twice;
- your purchases and subscription: what you bought, when, the amount and Stripe's reference for it. Stripe takes the payment itself, so we never see or store your card number.
When you search for a place, the search text goes through our server to OpenStreetMap's Nominatim service, without your IP address.
Like every website, our hosts keep short-lived server logs (IP address, browser, pages requested) to keep the site running and secure.
Your browser's storage
The site saves a few things in your browser, not on our servers:
- your sign-in session, so you stay signed in;
- preferences: file format, nesting settings, how My designs is sorted and shown;
- a design in progress while you sign in, so it's there when you come back.
We don't use advertising or analytics cookies, so there's no cookie banner.
Why we use it
- to run your account, save your designs and keep track of your credits;
- to take payments and keep the records tax law requires;
- to answer you when you contact us;
- to keep the site secure and stop abuse, such as people making accounts to collect free credits.
We don't sell your data, share it for advertising, or use it to profile you. We only email you about your account, purchases or important changes to the site.
Who helps us run the site
These services handle data for us, only to provide their part of the site:
- Supabase: our database, sign-in and file storage (accounts, designs, credits, share links).
- Google: sign-in. Google tells us your email, name and picture; it doesn't see your designs.
- Stripe: payments and subscriptions, under Stripe's privacy policy.
- Vercel and Cloudflare: hosting the site and keeping its server logs.
To draw your map, your browser also fetches map tiles, elevation tiles and some lake surveys directly from their public providers (such as OpenFreeMap, Amazon Web Services and government map services). Like any website, they see your IP address when it does. They don't get your account details.
These services may store data outside Canada, mainly in the United States, where it's subject to local law. We only use providers that protect it to a standard comparable to Canada's.
How long we keep it
- Account and designs: until you delete them or ask us to delete your account.
- Share links: until you stop sharing or delete the design.
- Purchase records: for as long as tax law requires (in Canada, six years), even after your account is deleted.
- Server logs: a few weeks at most.
Your rights
You can ask us to:
- show you the personal data we hold about you, or give you a copy;
- correct it;
- delete your account and everything in it. Email support@mylasermap.com from the address you sign in with, and we'll delete it within 30 days. Unused credits and any remaining Unlimited time are lost, so cancel Unlimited first.
You can also export your saved designs yourself from My designs (Select, then Export). We answer requests within 30 days. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the data protection authority where you live.
Children
Accounts are for people aged 13 and over. If you think a child under 13 has made an account, email us and we'll delete it.
Security
Data travels over HTTPS. Each account can only read its own designs and records, which the database enforces. No system is perfectly secure; if a breach puts your data at real risk, we'll tell you and the Privacy Commissioner as the law requires.
Changes to this policy
We'll update the date at the top when this policy changes, and tell signed-in users about important changes before they apply.