Effective September 11, 2026 (updated October 15, 2026). We collect account, location and device, and payment-status data needed to run Egregor and combine your readings into price estimates. Your submitted readings are published as public evidence; your account and payment details are not. We keep a reading you submit for up to five years, and a reading a device takes automatically only until it is folded into the place's history, then delete it (section 5); use only functional cookies and local storage, and honor deletion and access requests. The full policy follows.
Account data (handle, email; there is no password, you sign in by an emailed link or through Google, of which we keep only the verified email); location and device data attached to each reading you submit (position accuracy, device fix, altitude where your device reports one, timestamp); a SKU or scanned barcode string and price for each reading; when you submit a receipt, the store, its address, the date and time, the item lines, and the tax and total it shows (never the receipt text or image itself, and never a card number, name, loyalty ID, phone number, or email address on it, all stripped before storage); payment status (tier, renewal date) from our payment processor; we never receive your card number; usage events needed to run the product and to compute credits and rank. Separately, for every visit to the site we read, from our content-delivery network's edge (never your IP address), an approximate location (country, region, city, and postal code) and your browser/device type, language, and the page that referred you, used only as an aggregate traffic count by place (see "Retention and deletion" below). An item request (an "ask") stores the text you type, its time, your signed-in handle if you are signed in (otherwise none), and, only if your device sends it, a position rounded to about 1 km; the reference you use to check its status carries no handle and no position. A reading built from a receipt takes its place only from the receipt itself — the store it names, or its printed address, or, if neither resolves, the store you name from our catalog — never from your device's location; until a receipt's place is known that reading is held back, never shown at a location you did not buy from. The same holds for any reading that names a store or place: your device's location is never used to create a new public place, and a reading tied only to your device's position is withheld from every public surface until it is matched to a place you chose or our catalog already lists.
Photos, hotel bills, and excluded lines. If your location switch is on and you send a photo of a price, we read the place, direction, and time stored in the photo itself to suggest where it was taken; we keep them only if you submit the reading. If you submit a hotel bill, we keep only the nightly rates, room class, taxes, fees, total, the hotel, and the dates of the stay; a stay is never shown with your handle and is published no sooner than seven days after you check out. Prescription and lottery lines are dropped when your receipt is read and nothing about them is kept. The store-name text read from a receipt is used only to match the store and is deleted once it is matched.
Problem reports and flight logs. If you attach a picture to a problem report, we keep it only to fix that problem: only the people fixing it see it, its location data is removed, and it is deleted when the problem is closed or after 30 days, whichever comes first. If you upload a track log exported from your own flight app, we read only its times, positions, altitudes, and speeds to confirm that flight, then delete the file; the confirmed flight is kept like any other reading you submit.
Time out, evenings and commutes (only if you turn it on). If you turn on "count my time out" in the recorder, then for each day only we estimate which area of about 1 km your phone rests in overnight, and where it spends working hours, so we can count time away from it, evening outings and commute trips. These estimates live in memory for that day, are never stored, shown, sent to you or anyone, or linked to your account, and are discarded when the day's counts are made. Only area totals built from at least three people are published. You can turn it off at any time; nothing from it is kept.
Trains, subways and buses. Your recorder keeps running when you ride a train, subway or bus; we work out afterwards, from the readings themselves, which stretches were a ride, and we never count them as the street beside or above the line. Internet, noise and crowding readings from a ride are shown only on a separate transit view, by station or by the stretch between two stations, in periods of at least one hour, and only where at least three different people contributed; a mood reading is placed at the nearest station under the same rule. We never publish or share a person's trip: not where you boarded or left, not a station sequence, and not which stations you use. Only you can see, on your own page, how many of your trips were counted as rides, and you can correct one.
What we showed you as cheapest (signed-in accounts only). When you are signed in and we show you the cheapest place for an item, we keep a short note of it: your account, the item, the place, the price we showed and when. We use it for one thing: if a receipt you send later shows you bought that item there, your savings count can say you saved by following it. We keep only the newest note per item, for 8 days, then delete it. We never keep it for medicine, pharmacy or other health items, never keep it for visitors who are not signed in, never use it for advertising, and never sell or share it. It is included in "Download my data" and erased when you delete your account, and you can turn it off in your account settings ("Count savings from places we showed you").
Gifts and referrals. When you give or redeem a week, we record which account gave it, which account redeemed it, and when, to apply the limits, pay any bonus and stop abuse; to stop self-gifting we compare the two accounts' payment methods and devices, without showing either to the other person. The giver sees only whether the gift was used and any bonus earned, never the recipient's handle, email or activity. We keep this record for as long as either account exists plus 12 months, then delete it.
To combine your readings into price estimates, the traffic and signal pages offer two kinds of control: (a) a single reading, one tap — "Record my speed" (traffic) or "Measure download speed" (signal) — posts one speed or connection reading, with your position at that moment, and nothing more until you tap again; a standing box beside "Record my speed" ("Record my speed while I'm here: post it automatically each visit, no more asks") lets you turn that single-reading post into a per-device default that runs once, automatically, on each later visit — it is off until you turn it on, and turning it off at any time stops the automatic post, after which you are asked again on your next visit; (b) a continuous recording, start and stop — "Record my trip" (traffic) or "Record signal as I move" (signal) — the switch is off until you turn it on, your browser's own location permission is required before it can start, and we never record your position or connection readings before both are given. Once on, it posts your speed or connection readings, with your position, continuously for as long as the switch is on and the page stays open and in front; turning it on keeps your screen awake so the recording does not stop on its own, switching it off or leaving the page stops it immediately and always, and it never runs in the background; to prevent abuse (duplicate, impossible-speed, or bot-like readings); to run your account, subscription, and rank; to respond to the legal requests below.
Sensor readings. An internet-speed reading is the download (and upload) speed your browser measured, its time and position, and the connection type only as your browser itself reports it (for example "cellular" or "wifi"), otherwise "unknown"; we never ask you to classify your connection and we do not measure signal strength. A noise reading, where offered, uses your microphone only during the measurement you tap to start, and only after your browser's microphone permission; the page listens for about 5 seconds and your device turns the sound into one number, the average loudness (dB(A)); that number, the time and your position are all that is sent — no sound is recorded, kept, or sent. A road-roughness reading, where offered, uses your device's motion sensors only while a recording you started is on, and only after your browser's motion permission where it asks for one; only roughness figures for stretches of road are sent, never the raw motion stream. A GPS-quality reading is the accuracy, in meters, that your device reports for its own position. Each of these is off until you start it, and stops when you stop it or leave the page. Where your device reports a good altitude, we may use it with the ground height at your position to suggest a floor ("About floor 12?"); only a floor you tap to choose is kept.
2a. Alerts. When you set an alert, we keep what it watches (an item or place, a limit, a radius around a point you choose) and how to reach you (your account email, or a browser notification address your browser gives us after you allow notifications). We use them only to check new readings against your alert and tell you when it fires; the point you choose is never shown to anyone else. An alert email has a one-tap link that stops that alert without signing in; you can pause or delete any alert in My alerts, and deleting it deletes its point and its notification address. Browser notifications travel through your browser maker's push service, encrypted, and carry only the item, place name, price and a link — never your location or email.
Your reading's price, location, and time are published as part of the public evidence behind an Egregor price, a design choice you agree to when you submit (see Terms of Service, "Contributions and license"). Your account email and payment details are not published.
Play. If you choose to make your handle public, it may appear beside a store you kept for a week, shown only after that week ends; turn it off at any time and the store shows "a regular" instead. Joining a price hour is shown to others only as a count band ("3+"), never your position.
We set one HttpOnly session cookie when you sign in, and one device cookie so readings taken on this browser show at once for you; neither is used for advertising, and neither is shared with an advertiser. Your browser's local storage holds settings that keep the page as you left it: currency, units, country, active tab, map height, an in-progress reading, readings that could not be sent because your connection dropped (at most 20, with their position, deleted once sent or after three days), your photo-consent choice, a per-tab measurement cooldown, your account handle, a device identifier, and your organization if you have one. None of this is used to track you across other sites, and we run no analytics or advertising cookie. The device identifier is persistent; reset it from your account page or the help panel at any time, which starts you as a new, untrusted contributor. The only cookies or scripts a third party sets on this site are the ones named in "Data sharing" below, and none of them is for advertising, so no cookie-consent banner is shown.
If you post a reading without signing in, we also keep, with that reading, a keyed one-way code made from your internet (IP) address, so that many devices on one network count as one contributor (to stop one network from outvoting others). The address itself is not stored; the key is replaced every 30 days and the old key destroyed, after which the code can no longer be linked to any address. The code is never shown, logged in plain, or shared, and resetting your device identifier does not reset it; signing in replaces it with your account.
Egregor keeps up to five years of history for every item and place, so the map can show how a price or condition changes across a full multi-year cycle. A reading you submit yourself — a price, a receipt line, a survey answer — is kept in full for that entire five years. A reading taken automatically by a device or sensor is kept in full only until it has been checked into the place's running history, after which the individual reading is deleted and only the running history remains; past five years, every individual reading of either kind is deleted and only the running history remains. An account dormant for 12 months is archived and its handle released after notice. The visit-level location and device detail described in "What we collect" is rolled into a daily count for its place within 24 hours and is not kept after that; we never show or keep a postal code's daily count where it would reveal a single visitor's day, rolling it up to the city level instead until enough visits make the postal-code count unable to point to one person. You may ask us to delete your account and associated personal data at any time, including any of your own readings still held within the five-year window, by writing to privacy@egregormap.com; we complete deletion within 30 days, except for records we are required to keep for legal, tax, or fraud-prevention purposes.
Health answers (healthy, so-so, sick) are optional and need your one-tap consent. They are not stored with your account or device: each answer carries only a temporary code that works in one map area and is destroyed within 30 days, the answer itself is deleted within 24 hours, and only area totals of five people or more are kept and shown. We do not try to re-identify anyone from these totals, and anyone we license data to must agree not to try. This is how people around here feel, never who, and it is not medical information.
One-tap questions (Pay, Afford, Expect, Work, Safety) are optional. Each answer is kept the same way: no name, account, device, exact position or time is stored with it; it is folded into its area's daily totals at the end of the day; only areas with answers from five people or more are shown; and those totals are kept for up to 400 days. We never use your answers to set a price, an offer or anything else about you.
If you are in the EU/UK, California, or another place with a similar law, you may have the right to access, correct, delete, or export your personal data, and to object to some processing. Write to privacy@egregormap.com. We do not sell personal data, so there is no "do not sell" choice to make; we have no establishment in the EU/UK, and while we do not currently name an Article 27 representative there, we will if our EU/UK user base comes to need one.
If you are in Mexico. Egregor, operated by the individual named in the Terms (section 1), is the party responsible (responsable) for your personal data under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (2025). We use it only for the purposes in section 2, all of which are needed to run the service; we use none for marketing, profiling or any purpose that would need your separate consent. You may access, correct, delete, or object to the use of your data (derechos ARCO), or withdraw a consent, by writing to privacy@egregormap.com with the right you are using and how we can confirm you are the account holder (or that you act for them); we answer within 20 business days. Your data is processed in the United States by the providers in section 8. If we ever collect a health reading from you, it is sensitive personal data and is collected only with your express consent (section 5).
If you are in the UK or the EU. Egregor is the controller of your personal data. We rely on your consent for location, microphone and motion readings (each is off until you turn it on, and you can withdraw consent at any time by switching it off; readings already folded into a price stay folded, as section 5 explains); on our contract with you to run your account and subscription; and on our legitimate interest in preventing abuse and publishing aggregate price estimates. Your data is processed in the United States. You may complain to the UK Information Commissioner's Office or to the data protection authority where you live, though we would like the chance to answer you first at privacy@egregormap.com.
The service is not directed at children and is not knowingly used to collect personal information from anyone under 13. If you believe a child has submitted data to us, contact privacy@egregormap.com and we will remove it.
We share what is necessary with our payment processor (Stripe) to bill you, with hosting and infrastructure providers to run the service, and with the OpenStreetMap Foundation to show map tiles (your device's IP address and the map area you view reach them). If you choose to sign in with Google, Google receives what its sign-in script needs for that purpose only. We do not sell personal data. An enterprise data export is governed by the Terms of Service, "Enterprise data exports," and its licensee is a data recipient, not a data sale: an export is never segmented by an individual contributor, account, or device, so it is not a route to personal data under this policy.
There are no passwords to store: you sign in by an emailed link or through Google, and the session on your device is a signed cookie we can revoke. If a breach compromises your personal data, we will notify you as required by the law that applies to you.
privacy@egregormap.com for privacy requests, takedown@egregormap.com for copyright or trademark removal requests.
We may update this policy; continued use after a posted change is acceptance of it.