Last updated November 8, 2026
This is a draft placeholder written to cover Shuttermark's phase 1 launch and should be reviewed by a lawyer before the app goes live publicly. It describes what we actually do today, per CLAUDE.md's data rules — not aspirational language.
Account info (email, display name), the spots you mark (GPS coordinates, elevation, compass heading, notes, photos), shot dates, walks you create or RSVP to, and friend/block relationships you set up. If you grant location access, we use it to center the map and to mark spots — we don't track or store a history of your location in the background.
Every spot you mark is private unless you choose to share it. Spots you mark as sensitive, or near your home location, are stored with an approximate location only — we generate a fixed, randomized offset once and store that instead of your exact coordinates, and we never send the exact coordinates to anyone else, including other users you've shared with at "approximate" precision. Live location sharing (when it ships) is off by default, always on a timer, and we don't keep a history of it.
By default, nothing you mark is visible to anyone but you. When you share a spot or RSVP to a walk, the people you've shared with can see what you've explicitly shared. We don't have a public feed, and we don't show your content to people you've blocked — blocking is mutual and hides content and live status in both directions.
Account and spot data is stored with Supabase (Postgres). Photos are stored on Cloudflare R2. Both are standard infrastructure providers, not data buyers — we don't sell your data, and we don't run tracking ads.
We send account emails (confirmation, sign-in links, password resets) through Resend. Walk reminders and RSVP updates are sent as push notifications, not email.
You can delete spots, shot logs, and walks you created at any time. You can request account deletion by contacting us. You can block or report another user from their profile.
Questions about this policy: privacy@shuttermark.app