This is a small hobby app for ticking off the places named in the song "I've Been Everywhere." It is run by [YOUR NAME OR ORG], who you can reach at [YOUR CONTACT EMAIL]. That address is also where you send any request described below.
| Data | Why | Where it lives |
|---|---|---|
| Your Google account identifier (a random string) | To recognise you on your next visit and attach the right checklist | Google Firebase Authentication |
| Your name and email address, as Google reports them | To show who is signed in, and to let you contact us about your account | Google Firebase Authentication |
| Sign-up and last-sign-in timestamps | Created automatically by the sign-in system; used to clear out dormant accounts | Google Firebase Authentication |
| The list of places you have ticked | The entire point of the app | Google Cloud Firestore |
There is no advertising and no profile is built about you. Your Google password is never seen by this app — sign-in happens on Google's own page.
We would like to know how many people use this and which places get ticked most often. If you agree, Google Analytics records your visit: pages viewed, rough location from your IP address, device and browser type, and an event each time a place is ticked or cleared. It sets a cookie to recognise a returning browser.
None of it loads unless you choose "Allow". Decline and no analytics code is fetched and no analytics cookie is set — the choice is offered once, both options are one click, and the app behaves identically either way. If your browser sends a Global Privacy Control or Do Not Track signal, that counts as a decline and you are not asked at all.
Change your mind whenever you like: Cookie choices at the bottom of the checklist reopens the question. Withdrawing consent stops collection from then on. Analytics records already gathered are held for [YOUR GA RETENTION, e.g. 2 months] and then deleted automatically; to have earlier records removed sooner, email us.
Analytics data is not linked to your account. It is separate from your checklist and is never used to identify you.
Three strictly necessary things are stored in your own browser and need no permission: your sign-in session (so you stay logged in), a copy of your checklist (so it works offline), and your answer to the analytics question (so you are not asked twice).
The only non-essential cookie is the Google Analytics one described above, and it is set only after you allow it. There are no advertising cookies at all. Clearing your browser data removes everything, including your saved answer — so you will be asked once more.
Nothing is sold, rented, or shared for advertising. There is nothing to opt out of, because none of it happens.
On Google Cloud servers in [YOUR FIRESTORE REGION, e.g. europe-west1]. If that region is outside your country, the transfer relies on Google's standard contractual clauses.
Until you delete it, or until an account has gone unused for [e.g. 24 months], after which it is removed. Deletion through the app is immediate; backups age out within 30 days.
You can see, download, correct, or delete your data at any time. Two of those are buttons: sign in, open Your data, and choose Download a copy or Delete my account and data. Deleting removes both your checklist and your sign-in record, and cannot be undone. For anything else, email the address at the top.
Depending on where you live you may also have the right to object to or restrict processing, to complain to a data protection authority, or (in California) to know that we do not sell or share personal information and never have. We will not treat you differently for exercising any of this.
Where the UK/EU GDPR applies: your account and checklist are processed to perform a contract — you asked for an account that remembers your ticks, and storing them is the only way to provide it. Signing in is entirely optional; the app works without an account, saving to your browser alone.
Analytics is processed on the basis of your consent, given through the banner, and you can withdraw it at any time as easily as you gave it.
This app is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child has signed up, email us and the account will be removed.
Traffic is encrypted in transit; data is encrypted at rest by Google. Access rules are enforced on the server so that each account can reach only its own record. No system is perfect, and this is a hobby project maintained by one person — it holds nothing sensitive by design, which is the best protection available.
If this notice changes materially, the date above changes and signed-in users are told by email before the change takes effect.
← Back to the checklist