Privacy policy
Last updated: 15 August 2026
1. Who we are
pitchmappr is a product of Mappr Labs (“we”, “us”). We are the data controller for the personal data described in this policy.
Contact for any privacy question or request: support@mapprlabs.com.
We use third-party providers for hosting, storage, email, payments and analytics. Each processes data on our instructions only. Some operate outside the UK and EEA; where data is transferred, it relies on that provider’s safeguards, such as Standard Contractual Clauses.
2. What we collect on our websites
Analytics. We use Google Analytics 4 to count page visits and see which pages people read. It records things like the pages you view, roughly where in the world you are, and what kind of device and browser you use. It sets cookies in your browser to recognise a return visit.
We have turned off Google’s advertising features. There is no ad personalisation, no remarketing, and no cross-site advertising profile. We do not sell or share this data.
In the UK, the EEA and Switzerland, Google Analytics does not load at all until you accept it. Not “loads but doesn’t record” — the script is never requested. Elsewhere it is on by default and you can switch it off at any time using Cookie preferences.
Traffic counts on our documentation. Our documentation also uses a cookieless page-view counter. It sets no cookies, does not identify individual visitors, and collects no personal data, so it needs no consent and is not covered by the banner.
Server logs. Our hosting provider keeps standard request logs, including IP addresses, for security and reliability.
3. What we collect if you have an account
The application stores what an account needs to function: your email address, an optional display name, your organisation, department and group membership and your role, and the projects and maps you save.
Your maps are yours. Every record is isolated by tenant in the database itself, so another customer cannot read your work. Sharing happens only when you choose to share. You can export any project to a file at any time.
Location searches. When you search for an address, the text you typed is sent to the geocoding provider your organisation has configured, to turn it into coordinates. Only the query text is sent — no account identifier travels with it.
4. Cookies
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
pm_consent_region | Records which consent rules apply to you, so we know whether to ask before measuring anything. | Essential | 24 hours |
cc_cookie | Remembers the cookie choice you made, so we stop asking. | Essential | 6 months |
_ga, _ga_* | Google Analytics — distinguishes one visitor from another to count visits. | Analytics | Up to 2 years |
Essential cookies cannot be switched off — without them the site cannot tell whether it is allowed to ask you anything. We use no advertising cookies and no cross-site tracking cookies.
If you withdraw consent, we do not merely stop sending data — the _ga cookies are deleted from your browser.
If you have an account, the application also sets a session cookie to keep you signed in. That is essential to the service and is not analytics.
5. Why we are allowed to do this
- Consent — the only basis for analytics in the UK, EEA and Switzerland. You can withdraw it at any time, and doing so does not affect anything processed beforehand.
- Performance of a contract — the account data we need to give you the service you signed up for.
- Legitimate interests — keeping the service secure, available and free from abuse, and (outside the regions above) understanding how our sites are used.
6. How long we keep it
- Analytics — Google Analytics data is retained for 14 months, then deleted automatically.
- Account data — for as long as your account is open. Close it and we delete or anonymise what we no longer need.
- Billing records — kept as long as tax and accounting law requires.
7. Your rights
Under UK and EU data protection law you can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict how we use it, object to our using it, or ask for it in a portable format. You can also withdraw consent for analytics at any time.
Email support@mapprlabs.com and we will respond within one month.
If you think we have handled your data badly you can complain to your data protection regulator. In the UK that is the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, so we can put it right.
8. Changes to this policy
If we change what we collect or who processes it, we will update this page and change the date at the top. Material changes affecting the basis for analytics will be put back to you as a fresh consent request.