Egregor · privacy Privacy PolicyEffective September 11, 2026 (updated September 15, 2026). We collect account, location and device, and payment-status data needed to run Egregor and combine your readings into price estimates. Your submitted readings are published as public evidence; your account and payment details are not. We keep readings only until they age into a checkpoint, use only functional cookies and local storage, and honor deletion and access requests. The full policy follows.
Account data (handle, email; there is no password, you sign in by an emailed link or through Google, of which we keep only the verified email); location and device data attached to each reading you submit (position accuracy, device fix, timestamp); a SKU or scanned barcode string and price for each reading; payment status (tier, renewal date) from our payment processor; we never receive your card number; usage events needed to run the product and to compute credits and rank.
To combine your readings into price estimates (on the traffic and signal pages you may switch on "Measure while I'm here", which posts one speed or connection reading with your position on each visit while the page is open; it is off unless you switch it on, and it never runs in the background); to prevent abuse (duplicate, impossible-speed, or bot-like readings); to run your account, subscription, and rank; to respond to the legal requests below.
Your reading's price, location, and time are published as part of the public evidence behind an Egregor price, a design choice you agree to when you submit (see Terms of Service, "Contributions and license"). Your account email and payment details are not published.
We set one HttpOnly session cookie when you sign in, and one device cookie so readings taken on this browser show at once for you; neither is used for advertising, and neither is shared with an advertiser. Your browser's local storage holds settings that keep the page as you left it: currency, units, country, active tab, map height, an in-progress reading, your photo-consent choice, a per-tab measurement cooldown, your account handle, a device identifier, and your organization if you have one. None of this is used to track you across other sites, and we run no analytics or advertising cookie. The device identifier is persistent; reset it from your account page or the help panel at any time, which starts you as a new, untrusted contributor. The only cookies or scripts a third party sets on this site are the ones named in "Data sharing" below, and none of them is for advertising, so no cookie-consent banner is shown.
A reading is kept in full until it is older than four times its class's half-life, then it is folded into a checkpointed estimate and dropped as an individual record. An account dormant for 12 months is archived and its handle released after notice. You may ask us to delete your account and associated personal data at any time by writing to privacy@egregormap.com; we complete deletion within 30 days, except for records we are required to keep for legal, tax, or fraud-prevention purposes.
If you are in the EU/UK, California, or another place with a similar law, you may have the right to access, correct, delete, or export your personal data, and to object to some processing. Write to privacy@egregormap.com. We do not sell personal data, so there is no "do not sell" choice to make; we have no establishment in the EU/UK, and while we do not currently name an Article 27 representative there, we will if our EU/UK user base comes to need one.
The service is not directed at children and is not knowingly used to collect personal information from anyone under 13. If you believe a child has submitted data to us, contact privacy@egregormap.com and we will remove it.
We share what is necessary with our payment processor (Stripe) to bill you, with hosting and infrastructure providers to run the service, and with the OpenStreetMap Foundation to show map tiles (your device's IP address and the map area you view reach them). If you choose to sign in with Google, Google receives what its sign-in script needs for that purpose only. We do not sell personal data. An enterprise data export is governed by the Terms of Service, "Enterprise data exports," and its licensee is a data recipient, not a data sale.
There are no passwords to store: you sign in by an emailed link or through Google, and the session on your device is a signed cookie we can revoke. If a breach compromises your personal data, we will notify you as required by the law that applies to you.
privacy@egregormap.com for privacy requests, takedown@egregormap.com for copyright or trademark removal requests.
We may update this policy; continued use after a posted change is acceptance of it.