Privacy
Your mushroom spots are yours.
The whole idea of the service collapses if mushroom spots leak. That is why sharing stays off until you choose it, and the choice is always made by the owner of the marking.
Who sees your markings
- By default, nobody. A new account sees its own markings and nothing else. The service has no public map and no browsable list of other people's spots.
- Group by group. For every marking you choose which of your groups see it. Group members see each other and the markings shared to the group: share mushroom spots only with a group whose members you know.
- Position sharing is separate. Your own position is visible to others only while you have switched sharing on, and only to the group you chose. Your position disappears from others' maps about a minute after you stop sharing.
- Maintenance. The service is run by one person, and the admin view shows account counts and the state of payments. It shows nobody's markings.
What the service stores
- Account
- Email address and name via sign-in (Google or a one-time code sent to your email). New accounts have no passwords.
- Markings
- Location, species, kasvupaikka (site type) and your own note. This data is never handed to outsiders or used for any other purpose.
- Trips
- The travelled track when you record a trip. Individual timestamps are never kept, only the start and end of the session.
- Payment
- The one-euro setup payment goes through Stripe. Card details never pass through this service and are never stored here.
- Feedback
- Your message, your email address for the reply, the app version and a browser identifier. No location.
Visitor analytics
Both this site and the app count their own usage, on their own server. There are no outside analytics services, ad identifiers or tracking cookies. Nothing on these pages is loaded from a third-party server either, fonts and images included.
- The analytics tell what happened and how often: which screen was opened, which map layer was switched on, whether feedback was sent. They never carry location, no coordinate and no marking name, and the app additionally checks outgoing events so a coordinate cannot slip in by accident.
- The browser gets a random identifier so the same visitor is not counted as ten. It is no cookie and it travels nowhere else.
- Raw logs contain the IP address, as on every web server. They are deleted automatically in 90 days, and the summaries computed from them are plain counts.
Your own data
A marking or a trip can be deleted in the app. The whole account and its data are deleted on request: Valikko (menu) → Palaute (feedback), or straight to the maintainer. The service never sells or hands data to third parties, and no summaries, statistics or maps of mushroom spots are ever produced outside the service.
The service runs in Amazon Web Services' Stockholm data centre (eu-north-1), so the data stays inside the EU. Sign-in runs on Amazon Cognito, email on Amazon SES and payments on Stripe.