mypicpinsPrivacy Policy
Who we are
mypicpins is operated by Joseph Driskell. Contact: support@mypicpins.com.
What we access in your Google account
We request one Google permission: drive.file. This is the narrowest Drive scope Google
offers. It gives an app access only to files that app created — in our case, the
mypicpins.com folder and the photos you upload through the app. We cannot see, list or
open anything else in your Drive, including files you add to that folder from the Drive website.
From that permission we read:
- File names, folder names, and creation dates.
- The GPS coordinates already embedded in your photos, which Google returns as metadata — the photo files themselves are never downloaded to us.
- Thumbnail links, which your browser loads straight from Google.
- Your Google account's email address and Drive identifier, so we know whose map is whose.
We use this data to place your photos on a map. We do not use it to build advertising profiles, we do not sell it, and we do not share it with anyone except as described below.
What we store on our servers
On Cloudflare Workers KV:
- Your Google account identifier and email address.
- Your chosen username, if you claim one.
- If you publish a map: album names, photo file IDs, and coordinates. Not the photos.
- The date and running count of your sign-ins, so we can tell how many people at an organisation are using a licence.
- Licence records, if you buy or are granted Pro.
Preferences — theme, language, watermark setting, your last map position — are kept in your own browser's local storage and never reach us.
Photos and public maps
Marking an album public asks Google Drive to set those specific files to anyone with the link can view. From that moment the photos are served publicly by Google, not by us. Anyone with the link can see them, and links get forwarded.
Photo coordinates reveal where a picture was taken. Do not publish albums shot at your home, your children's school, or anywhere you would not want a stranger to have an address for.
Making an album private again removes that Drive permission, but anyone who already downloaded or screenshotted a photo still has it. We cannot recall that.
Advertising
Free maps show travel experiences near the pin you are looking at. These are affiliate links — if you book something we may earn a commission at no extra cost to you. Matching happens from the coordinates already on screen; no tracking pixels, no third-party ad network, no cross-site profile. Private maps show no ads at all, and Pro removes them everywhere.
Payments
Payments are processed by Gumroad, who act as merchant of record. We never see or store your card details. We receive your purchase email address and licence key so we can activate Pro. Gumroad's own privacy policy governs what they collect.
Cookies and analytics
We set no advertising or tracking cookies and run no analytics scripts. Your browser stores your preferences and your Google sign-in token locally so you do not have to reconnect on every visit.
Who else sees your data
- Google — provides your Drive files and handles sign-in.
- Cloudflare — hosts the site and the small amount of data above.
- Gumroad — processes payments.
- Viator, GetYourGuide, Klook — only if you click an affiliate link.
We do not sell personal information.
Deleting your data
Signing out revokes our access to your Google Drive immediately. To have your stored record — email, username, published map, sign-in log — deleted, email support@mypicpins.com and we will remove it. You can also revoke access yourself at any time from your Google account permissions page.
Children
mypicpins is not intended for anyone under 13, and we do not knowingly collect their data.
Changes
If this policy changes materially we will update the effective date above and note the change on this page.