Version 2 · in effect from 13 November 2026

Privacy Policy

The short version

• Atlas keeps your email address and the travel collection you build in it: places, trips, notes, your Notebook, labels and saved views. Nobody else can see them.
• Atlas uses them to run Atlas. It doesn't sell them, show ads, or build a profile of you.
• Atlas counts how the beta is used, as totals, from its own database. You can opt out at any time, without a reason, by email (see "Your right to object to the counts").
• Some services see part of what you do because Atlas relies on them: search, maps, email and hosting. They're all listed below, with what each one receives.
• You can ask for a copy of your data, or for all of it to be deleted, by writing to info@thisisatlas.app.

The rest of this page is the full policy. It covers the Atlas app, at app.thisisatlas.app, and this website, thisisatlas.app.

Who runs Atlas

Atlas is a free beta and a personal project, with no ads, sponsors or other income. It's made and run by one person, Cláudia Torres Delgado, in Portugal. Cláudia decides how your data is used and is responsible for it. In privacy law, that makes Cláudia the "controller".

Write to info@thisisatlas.app about anything on this page. Cláudia reads and answers every email.

What Atlas keeps, and why

Your account

When you sign in, Atlas keeps your email address. That's how it recognises you, and the address is where the sign-in link and code go. There is no password and no profile page.

If you choose Continue with Google, Google tells Atlas your email address, the name and picture on your Google account, and a number that identifies that account. Google also knows you've signed in to Atlas. Atlas stores what Google sends with your sign-in and shows you your email address and your Google picture, which your browser loads from Google. It doesn't use the name or picture for anything else.

Atlas creates your account when you press Continue, before you've opened the email. If the address is never confirmed, or you don't go on to agree to the Terms, the account is deleted after 7 days.

When you sign in on a device, it stays signed in until you sign out. Atlas's database records when each session started and was last renewed. Its hosting records the address your connection comes from (your IP address) and your browser. Atlas uses these to keep your account secure.

Your collection

Everything you add to Atlas is stored so it's there the next time you open it, on any device:

• places, with their position on the map and any note you write (up to 500 characters);
• whether you've visited a place, want to visit it, or want to revisit it;
• trips, with their names, dates and itinerary, and check-ins;
• your Notebook for each trip;
• labels and saved views.

Atlas also adds some places by itself: the countries, regions, continents and cities your visited places are in. They're used for Passport and stay part of your collection.

Only your account can read or change your collection. Nothing in Atlas can be shared or made public. Cláudia can see the database as the person running it, and looks at an individual account only to answer your request or to fix a problem you've reported.

Place descriptions

When you open a place, Atlas can show a short description of it and, if you press More, a longer guide. Atlas's server finds the place's Wikipedia article through public sources (OpenStreetMap data, Wikidata and Wikipedia). Mistral, an AI company in France, writes the description from that article. Mistral receives only the article. It doesn't receive your account, your notes or your location.

Descriptions are about places, not people. Once written, one is shown to anyone who opens the same place. To limit how many descriptions each account can ask for, Atlas counts them per account per day, and deletes those counts after 7 days.

Your location

Atlas reads your device's position only when you ask it to, and your browser asks your permission first.

• The locate button shows where you are on the map. The position stays on your device.
• Follow me, on a phone, keeps showing your position while it's on and Atlas is on screen. Dragging the map stops the map following you, but your position keeps updating until you turn Follow me off or leave Atlas. Nothing is saved.
• Where are you? lists places near your position. When Atlas finds fewer than three among your own places, it asks Photon (see below) what's nearby, which sends Photon your position.
• Add missing place makes a new place where you're standing and asks Photon for its address. The position is saved only if you save the place.
• Check-ins. While your position is on, Atlas compares it with today's stops on your device, and asks before checking you in.

Your position is precise, not rounded. Atlas keeps no history of where you've been. The only positions it stores are those of the places you save.

Usage counts

Atlas counts how the beta is used, so Cláudia can see whether it works and what to improve.

What's counted. New accounts, and on which days each account did one of these things: saved or edited a place, made or changed a trip, added a stop, checked in, wrote in a Notebook, used labels, or made a saved view. Only that it happened, on which day. Not what you wrote, which place it was, or where you were.

What isn't. Opening Atlas, looking at the map, searching, or using Passport. Nothing extra is sent from your device for the counts: they're worked out from the changes you already ask Atlas to save. Changes Atlas makes by itself, like adding the countries your places are in, aren't counted as yours.

Two layers, and they're different:

• The working records. To count, Atlas reads the rows in its database, and keeps a small daily record per account: one line for each kind of thing you did that day, such as "added a trip on 3 March". Both are linked to your account, so they're personal data. They never leave Atlas's database, they're deleted with your account, and the daily lines are deleted after 13 months.
• The results. Cláudia looks at totals and percentages across everyone, such as "40 people added a trip this week". A total saved to compare weeks names no one.

Why Atlas can do this without asking first. The legal basis is Atlas's legitimate interest in understanding how its beta is used, so it can be improved (GDPR Article 6(1)(f)). That interest has limits. Atlas counts only the kinds of action above, keeps the daily lines inside its own database, looks only at totals, and deletes the lines after 13 months. Cláudia has written down why this doesn't outweigh your privacy, and you can ask to see it. Because the counts rest on legitimate interest and not on your consent, you have the right to object to them at any time, described next.

Your right to object to the counts

You can opt out of the usage counts at any time, without giving a reason. Write to info@thisisatlas.app from the address you sign in with, or reply to any sign-in email. Atlas then leaves your account out of every count from that moment on, and deletes your daily lines, within a few days at most. Totals already saved before you opted out stay as they are: they're counts across everyone, and your part in them can't be taken back out. Opting out changes nothing else about how Atlas works for you.

Detailed usage, if you turn it on

After you first sign in, Atlas asks whether you'd like to share detailed usage. If you say not now, or turn it off in the account menu, it asks again the next time you sign in. It's off unless you say yes, and you can change your answer at any time in the account menu.

If you turn it on, Atlas sends PostHog, an analytics service hosted in the EU, which screens you open and which buttons you press. Each event is linked to a random id for your account, not to your name or email. That makes it pseudonymous rather than anonymous: Atlas could connect it to your account, but doesn't look at individuals. It never includes what you write, the places you save, their names, or your location. Atlas uses it only to understand how Atlas is used and improve it.

The legal basis is your consent (GDPR Article 6(1)(a)), which is also what Portuguese law needs before anything is stored on your device for this. Turning it off stops it straight away and removes PostHog's identifiers from that device. Events already sent are kept for a year, then deleted. If you'd like them deleted sooner, write to info@thisisatlas.app.

Emails

Atlas sends you only the sign-in email, and an email if something important changes (see "Changes to this policy"). If you say yes when Atlas asks, it can also send an occasional email about what's new. That rests on your consent, you can unsubscribe from any of them, and Atlas sends none otherwise. If you say not now, or turn them off in the account menu, Atlas asks again the next time you sign in.

When you write to Atlas, your email and Cláudia's reply are kept as long as they're needed to answer you, and as a record of requests about your data.

Who else receives something

Atlas relies on other services. Some work for Atlas and may use your data only to provide that service ("processors"). Others are public services your browser talks to directly, which have their own privacy terms.

Working for Atlas

Services your browser contacts directly

Emails you send Atlas are forwarded by Cloudflare to Cláudia's personal Gmail account and read and answered there. Google handles them under its own terms for Gmail, not under a contract with Atlas. Google is a US company, so those emails may be stored outside Europe. This includes requests about your data, so it's worth leaving out anything you wouldn't want in an email.

If you use Continue with Google, Google handles that sign-in under its own terms.

Atlas doesn't sell or rent your data to anyone, and doesn't share it for advertising.

Outside Europe

Cloudflare, Resend and PostHog are US companies, and Supabase's company is based in Singapore. When your data reaches them, it's protected by the European Commission's standard contract terms, and, where the company has joined it, the EU–US Data Privacy Framework. You can ask for a copy of the terms that apply.

Atlas's database itself is stored in Ireland.

On your device

Atlas sets one cookie, and only if you choose a theme: it holds your choice of light, dark or system, so the app and the website match. The app also stores these things in your browser, all of them to make it work the way you asked:

• Your sign-in, so you stay signed in on this device until you sign out.
• A copy of your collection, the map you've looked at, and the descriptions you've opened, so Atlas opens quickly and works without a connection. The map can take up to 200 MB.
• Your recent searches, and places you've asked Atlas not to suggest again today.
• Choices you make on screen, like the light or dark theme and which sections are folded.
• City outlines and row counts, which make places and lists load faster.
• Atlas's own files, so it can start without a connection.

Signing out removes your sign-in, the copy of your collection, the map and descriptions, and your recent searches from that device. It also signs you out on your other devices, once their current session ends (usually within an hour). Your on-screen choices, the outlines and Atlas's files stay.

If you turn on detailed usage, PostHog also keeps a random id and the current visit's id in your browser. Turning it off removes them.

This website keeps only your theme, in that cookie and in your browser. If you used Atlas here at thisisatlas.app before the app moved to app.thisisatlas.app, the website removes what the app left in your browser, apart from your light or dark theme.

Cloudflare may ask your browser to report network errors to it. That's part of hosting.

Visits to this website

Cloudflare, which hosts the website and the app, counts visits from its own records of the requests it serves: how many pages were loaded, from which countries, and which pages. Nothing runs in your browser for this, and Cláudia sees only the totals.

How long Atlas keeps things

Your rights

You can ask Atlas to:

• give you a copy of your data, in a format you can use elsewhere;
• correct something (most of it you can edit in Atlas directly);
• delete your account and everything in it;
• stop using your data for a purpose, or restrict how it's used while a question is settled;
• leave you out of the usage counts (see "Your right to object to the counts").

Write to info@thisisatlas.app from the address you sign in with. Atlas replies to that address to check the request came from you. It never asks for an ID document. Atlas answers within a month, and usually much sooner. If a request is complicated, Atlas can take up to two more months, and will say why within the first month. It's free.

Deleting your account. Atlas deletes your account and everything in it, usually within a few days. Backups may hold a copy for up to 30 days more. They're never restored without your deletion being applied again. Your devices clear their copy the next time they connect. Descriptions of places you opened stay, because they belong to the place, not to you.

A copy of your data. You get a zip file with your collection as JSON, your places as GeoJSON and as a spreadsheet (CSV). It's sent as a reply to your sign-in address.

You can also complain to Portugal's data protection authority, the CNPD, or to the authority where you live. Writing to Atlas first is usually quicker.

Age

Atlas is for people aged 16 or over.

Security

Each account can read only its own data. That's enforced by the database itself, and tested. Connections to Atlas are encrypted. Backups are kept on an encrypted disk. Cláudia's accounts at the services above use two-step sign-in.

If something goes wrong that puts your data at risk, Atlas will tell the CNPD within 72 hours. If the risk to you is high, Atlas will tell you directly.

Changes to this policy

If this policy changes in a way that matters to you, for example a new service receiving your data or a new use of it, Atlas emails you before the change takes effect. Small corrections just get a new date. Anything that needs your consent will ask for it separately.

Every version is listed below.