Privacy policy

Satismaptory (satismaptory.com) is run by Saltado LLC, a Texas limited liability company of Austin, Texas ("we", "us"). We are responsible for the personal data described here. Questions or requests: support@satismaptory.com.

The short version

• The public map works without an account, and we store nothing about you for it beyond the request logs our host keeps.
• An account stores what it takes to sign you in and to keep your saves: your username, email address and what you add.
• No ads, no third-party analytics or tracking, and we never sell or share your data for advertising.
• Delete a save and everything in it is deleted. Ask us to delete your account and we will.

What we collect

Using the public map. Your browser asks our host, Cloudflare, for the pages and map images. Cloudflare processes your IP address and browser details to deliver them and to protect the site, and may keep request logs for a short time. Your map settings (filters, the open menu tab, hidden zones) stay in your own browser's storage and are never sent to us.

Your account. Your username, display name, email address, whether you confirmed it, and your password stored as a salted hash (we cannot read it). If you sign in with Google or Discord, we receive your name, email address, profile picture link and account ID from them, and store the sign-in tokens they return. We ask them only for your basic profile and email, and we use the tokens for nothing beyond signing you in.

Sign-ins. For each sign-in we store a session with the IP address and browser it came from, to keep you signed in and to spot misuse. We also count requests per IP address for a short time to slow down password guessing.

Your saves. The save's name, its members and their roles, invite links, the markers you check off or skip (and who did it, and when), zones, the shapes and text you draw, and agent tokens (stored as hashes).

Your save files. A save file you drop on the map is read in your own browser and the file is never uploaded. Without an account nothing is sent to us at all, and the result is gone when you leave the page. When you keep it in your account, or run the Satismaptory agent on your own computer, a summary is uploaded: the session name, save time and play time, the names your players use in the game and where they stand, the location of your HUB, which resource nodes you have tapped, which items you have collected and which crash sites you have looted. A save keeps its newest 50 summaries. If you turn on the optional live feed (the Ficsit Remote Monitoring mod), player positions and extractor states are passed through to the open save pages as they happen and are not stored.

Email. We send account emails (address confirmation and password reset) through SMTP2GO, which processes your email address and the message to deliver it.

Support payments. Ko-fi, PayPal, Venmo and Cash App are separate services with their own privacy policies. Ko-fi opens in a new tab, and it and its payment providers collect your payment details; we never see them. If you use one of these services, we see what it shows the recipient, such as your name there, the amount and any note. A crypto payment is recorded on a public blockchain, where we and anyone else can see the sending address and the amount.

Email to us. If you write to us, we keep the conversation to answer you.

Who can see what

Nothing you add to a save is public. The save, its summaries, check-offs, zones and drawings are visible to the members of that save, and your display name and username are visible to the people who share a save with you. Anyone holding an active invite link can join the save it belongs to, so share links only with people you want in, and revoke them in the save's settings when you are done.

Why we use it

• To provide the service you signed up for: accounts, saves, sharing and save tracking (performance of a contract).
• To keep the site secure and working, and to prevent abuse (our legitimate interests).
• To keep the records the law requires, for example of payments (legal obligation).

Who processes it for us

• Cloudflare: hosting, database, file storage and DNS.
• SMTP2GO: account emails.
• Ko-fi, PayPal, Venmo and Cash App: support payments, only if you make one through them.
• Google and Discord: only if you choose to sign in with them, under their own privacy policies.

Our data is stored in the United States and served through Cloudflare's worldwide network, so it may be processed outside your country. Where the law requires it, these transfers rely on our providers' standard contractual safeguards.

Cookies and browser storage

We use one cookie to keep you signed in, plus short-lived cookies while a Google or Discord sign-in is in progress. Your map settings live in your browser's local storage. We use no advertising or analytics cookies.

How long we keep it

• Account data: until you delete your account.
• Save data: until the save is deleted. Deleting a save removes its summaries, check-offs, zones, drawings, invites and agent tokens.
• Save summaries: the newest 50 per save; older ones are deleted automatically.
• Sign-in sessions: they expire after 7 days without use, or when you sign out.
• Payment records: as long as tax law requires.

Your choices and rights

You can rename or delete your saves, revoke invite links and agent tokens, and leave saves yourself. To get a copy of your data, correct it, or delete your account, email support@satismaptory.com from the address on your account; we answer within 30 days. Depending on where you live (for example the EU, the UK or California) you also have the right to object to some uses, to restrict them, to take your data elsewhere, and to complain to your data protection authority. We do not sell or share personal information as California law defines those terms.

Children

Satismaptory is not meant for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, tell us and we will delete it.

Security

Every connection uses HTTPS. Passwords and agent tokens are stored only as hashes, and access to the data is limited to the people who run the site. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Changes

If we change this policy, we update the date at the top. If a change matters for how your data is used, we will say so on the site or by email before it takes effect. The terms of use cover the rest of how the site works.