Privacy
What Geobox keeps about you and your data, why, where, for how long, and how to have it removed. Last updated 18 October 2026.
Who is responsible
Geobox is run by Geomermaids. For anything about your data, write to contact@geomermaids.com.
What we keep
| What | Why | How long |
|---|---|---|
| Your email address, and your name: the one you type in Settings, or the one your sign-in provides | To sign you in and show who is in a workspace | Until you delete your account |
| Which workspaces you belong to, and your role | To decide what you can see and do | Until you leave the workspace or delete your account |
| A sign-in cookie | To keep you signed in | 30 days after your last visit, or until you sign out |
| A demo cookie | Set when you open the demo box: counts how many browsers try it, and whether a box was created after it (a number, not who) | A year, or until you create your box |
| Sign-in codes and links we email you (kept scrambled), with the network address they were requested from | To sign you in, and to stop abuse | A day |
| Your passkeys, if you add any: their public key (it can check a sign-in, not make one), where they were added (for example "iCloud Keychain, added on Mac with Safari") and when they were last used. Your fingerprint or face never leaves your device. | To sign you in | Until you remove them in Settings, or delete your account |
| What you do in Geobox, in broad steps and with the time: opening your box, adding data (and why Geobox couldn't take it, if so), opening a dataset or a map. Never what your data holds. | To see what works for new users and what gets in their way | A year, or until you delete your account |
| The files you add, and what Geobox makes from them | That's the service | Until you delete them, or the workspace |
| How many times the page about Geobox was opened, per day (nothing about who opened it) | To know whether it's useful | As long as Geobox runs |
| For a map you make public: how many times its page was opened, per day (nothing about who opened it) | To show you how much it is seen | Until you delete the map |
| If you ask for a preview: your name, email, organisation and what you wrote, a fingerprint of your network address (to limit repeated requests) and the public map you came from | To answer you | Until we've answered, at most a year, or until you ask us to delete it |
| Downloads prepared for you | To hand you your data in another format | 7 days |
| Messages you send with the Feedback button, any screenshot you attach, the page you were on and your browser's name | To fix what you tell us about | Until we've dealt with them, at most a year |
Your browser also remembers a few display choices (such as how many datasets per page) on your own device. There is no advertising, no tracking and no analytics.
Your data stays yours
- Only the members of a workspace can see what's in it. Nothing becomes public unless an owner publishes it in a catalog.
- We don't look at, sell, share or analyse your data. We open it only to fix a problem you report, or if the law requires it.
- You can download everything you added, in its original form, at any time.
Where it's kept, and who helps us
Geobox runs on Cloudflare: its servers, its file storage and its database. Cloudflare processes data for us under its data processing terms. You sign in with a link Geobox emails you (see Email below).
- Files: by default kept in Cloudflare's storage, which may place them in several regions. A workspace created with "in the EU" keeps its files in data centres of the European Union only. On the Pro and Team plans, a workspace can keep its files in a bucket you choose and pay for: that provider then holds them.
- Account records (emails, workspaces, the description of your datasets) are kept in Cloudflare's database service. The EU choice applies to files, not to these records.
- Email: a mail service (Resend) delivers the emails Geobox sends: sign-in links, a notice when someone shares a dataset with you, and a notice when an import is done, if you asked for one. They hold no data from your files.
- Google or Microsoft: only if you choose to sign in with them. They tell us your email address and name.
- Map background: the map behind your data comes from OpenFreeMap, which sees your network address as your browser fetches it.
- RustGIS: only if you click "Open in RustGIS", the layer is opened there with a link to it.
Deleting
- Deleting a dataset removes its original, its converted copies and its downloads straight away.
- An owner can delete a whole workspace in Settings: everything in it is removed straight away.
- You can delete your account in Settings. Workspaces only you are in are deleted with it.
- Files aren't backed up, so a deletion can't be undone. Database records may remain in Cloudflare's recovery copies for up to 30 days before they're gone for good.
Your rights
You can ask to see, correct, export or erase what we keep about you, or object to how we use it. Most of it you can do yourself in Settings; for the rest, write to us and we'll answer within a month. If you think we handle your data wrongly, you can also complain to your data protection authority (in France, the CNIL).
Changes
If this page changes in a way that matters, we'll tell you in Geobox or by email before it applies.