Privacy

What we collect

• Searches and your location. When you use Near me, your browser shares your location with this page to find nearby machines. We don’t store it. For each search we keep only a rounded area (about 11 by 8 km), the place name you picked, how many machines matched and how far the nearest working one was, to see where machines are missing. Areas are reported only once at least 10 visitor-days searched there.
• Saved and recently viewed machines. Kept in this browser’s storage, with no account. Recently viewed machines are never sent to us; to show your saved machines’ latest status and fee, the page asks us for those machines.
• Usage counts. We count page and listing views and taps on directions, call and website links, with no cookies, no third-party trackers and no fingerprinting, to show operators how their listings perform. A count keeps the kind of page you came from (or another site’s name, never the full address), your device type, and a short code made from your IP address and browser that changes every day, so we can count people without following anyone from one day to the next. When you tap directions, we also note which operators’ machines were on the results you saw, to show operators how often a search ended at a competitor. The detailed counts are deleted after 30 days; daily totals are kept 13 months. If your browser sends Do Not Track or Global Privacy Control, we don’t count you at all.
• Reports and reviews. What you write, plus a one-way hash of your IP address that changes daily, used only to stop spam. An email address only if you give one.
• Check-ins. When you tap “It worked” on a machine, we keep that, how long you waited if you say, and the same daily-changing IP hash, only to stop spam.
• Email alerts. If you ask to hear when a machine is back, drops its fee, or opens near a ZIP code: your email, the machine or ZIP, and your language. Nothing is sent until you confirm by email. Every alert email has a one-click unsubscribe and a link to a page listing all your alerts, where you can stop any or all of them.
• Host sign-ups. If you offer your store for a machine: the store’s details, your name, email and phone if you give it. Operators see the store, never your contact details; we forward their offers to your email.
• Operator accounts. Your email, your name if you add it, which optional emails you turned off, and a session cookie to keep you signed in. If you pay for a plan by card, Stripe handles the card; we keep only Stripe’s customer and subscription ids. If you pay in bitcoin, Strike receives the payment; we keep the invoice, the payment address, the amount and Strike’s ids for it, never your wallet details.

What we don’t do

• We don’t sell personal data, and we don’t run third-party advertising trackers.
• We don’t sell crypto and never see your transactions.

Browser notifications

If you choose “In this browser” for an alert, your browser gives us a push address (from Google, Mozilla, Apple or Microsoft, depending on the browser) instead of an email. We keep it with what you follow and your language, and delete it when you stop the alert (on the Your alerts page, or with “Stop these alerts” on a notification), or when you block notifications and the browser tells us the address is no longer valid at the next alert.

The iOS and Android app

• Location. The app asks for your location only when you tap Near me or add a machine, and only while you’re using it. It finds machines on your phone and sends us the map area or the point you searched, as the website does; the rounded-area rule above applies. Approximate location works too.
• Install id. On first launch the app makes a random code for this install. It rides along with reports, reviews, check-ins and suggestions so one phone can’t flood them; we keep only a scrambled form of it. It isn’t an advertising id, the app has no advertising id at all, and it’s gone when you delete the app.
• Saved and recent machines, settings. Kept on your phone, never sent to us.
• Usage counts. The same counts as on the website, marked as coming from the app with its version and your phone’s system (iOS or Android). Turn them off in the app’s Settings.
• Notifications. If you turn on an alert, Apple or Google gives the app a push address, which we keep with what you follow and your language, and delete when you stop the alert or the address stops working.
• Photos. A photo you add of a machine is shrunk on your phone and its location data removed before it’s sent.
• Crash reports. If you allowed it in your phone’s settings, Apple or Google may share anonymous crash reports with us.
• Operator accounts in the app sign in with an emailed code; the session is kept in your phone’s secure storage. Delete the account in the app (Settings → Operator account) or at /account/delete.
• No tracking across other companies’ apps or sites, so the app never shows Apple’s tracking prompt.

Service providers

Hosting, our database, email delivery, payments (Stripe for cards and Strike for bitcoin, for operators), map tiles (OpenFreeMap), place search (OpenStreetMap Nominatim) and, for the app, Expo’s push service with Apple and Google, process data on our behalf to run the site and the app.

Your choices

Stop alerts with the link in any alert email, or on the Your alerts page (/alerts) for email and browser alerts. Operators, admins and stores can turn off optional emails from the link at the foot of each one, or under Notifications in the dashboard; sign-in links, team invitations and billing receipts can’t be turned off. Delete an operator account yourself at /account/delete or in the app. Ask us to delete reviews, reports or a host sign-up by writing to privacy@ (address to be confirmed at launch).