Privacy

What this site does not do

The public pages set no cookies, load no third party scripts and use no analytics. Their one request to this server asks for the site's name, colour and logo; it carries no cookie and nothing about you.

What is stored

Public OpenStreetMap data about the changesets that reviewers look at: the changeset, its elements, and public facts about the account that made it.

What a reviewer decides: the decision, any note and comment text they write, and the name they sign in with. An invite code reviewer chooses a display name; a reviewer who signs in with OpenStreetMap is stored by user id and display name. No OpenStreetMap token is kept.

A signed-in session uses two cookies, one for the session and one to protect against forged requests. They are removed when you sign out.

The web server keeps an access log for 14 days to spot errors and abuse: the time, the address of the visitor with its last part removed, the path without any query, the status and the size. It holds no cookie and no header.

How long

Decisions are kept as a record and are not edited; a correction is a new entry. An admin can export the history. Ask the contact below to have your entries reviewed or removed.

Contact

Questions about privacy go to the contact address in the repository's security policy.