Privacy Policy

What we collect

• Account info: your email, the username you choose, and a hashed password.
• Your saves: the places you save, the notes you write, ratings (disliked / meh / liked / loved), visited status, and the people you follow.
• Product analytics: which pages were viewed and which product actions were taken — processed by PostHog in cookieless mode. When you are signed in, these events can be associated with your Cerca account so we can understand and improve product usage.
• Technical basics: IP address and browser type, used to serve the app and keep it secure.

What we don't do

• We don't sell your data. Ever.
• We don't run third-party advertising trackers.
• We don't load Meta, TikTok, X, or any other social-network pixel.
• We don't read your contacts, calendar, or other apps.

Who can see your saves

Your saves are private to you by default. They become visible to other people only when:

• You make your profile public — then anyone with the link can see your saved places.
• You accept a follow request — that person can see your saves.

Per-place notes stay private until you choose to share them.

Third parties that touch your data

• Fly.io — hosts the app and the database. Data is stored in the United States.
• Google Places API — when you search for a place, we query Google for the details (name, address, photo).
• Mapbox — renders the map tiles you see.
• PostHog — processes product-usage events for analytics. Cerca configures PostHog without analytics cookies.

That's the full list.

Cookies

• A session cookie, so you stay logged in.
• A CSRF token cookie, so forms can't be forged.

No third-party ad cookies. No social-network tracking pixels. PostHog is configured in cookieless mode and does not set analytics cookies.

Your rights

You can ask us to:

• Show you a copy of everything we have on you.
• Give it to you in a portable format.
• Delete your account and everything in it.

Message me on Threads for any of the above. I respond within seven days.

How long we keep your data

As long as your account is active. If you delete your account, we wipe your data within 30 days. Backups roll off within 60 days after that.

Kids

Cerca isn't for kids under 13. If you find out a kid under 13 has an account, message me on Threads and I'll delete it.

Changes to this policy

If we change this policy, we'll update the date below. If we make a material change (e.g. a new third party touches your data, or we change what we collect), we'll email everyone with an account.