Privacy Policy

Inked Atlas (inkedatlas.art)
Last updated: October 10, 2026

Inked Atlas is a free fantasy map viewer operated by Inked Atlas ("we," "us"). This policy explains what information we collect, why, and what we do with it. The short version: we collect the minimum needed to run a free account, we don't sell or share your data, and you can delete everything at any time.

1. What We Collect

Account information

When you create an account we collect:

• Email address — used to identify your account, let you sign in, and send account-related messages (password resets, security notices).
• Password — only if your account has one. Passwords are stored hashed by our authentication provider; we never see or store them in plain text.

Email link sign-in

If you sign in with an emailed link, we use your email address to send you a one-time sign-in link. No password is created or stored.

Google sign-in

If you choose to sign in with Google, Google shares the following with us:

• Your email address
• Your name
• Your profile picture

We use this only to create and identify your Inked Atlas account and to display your name and picture in the Service. We do not request access to your Google Drive, Gmail, Calendar, contacts, or any other Google data. We do not use Google user data for advertising, and we do not sell it or share it with third parties. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Discord sign-in

If you choose to sign in with Discord, Discord shares the following with us:

• Your email address
• Your Discord username and user ID
• Your avatar

We use this only to create and identify your Inked Atlas account and to display your name and avatar in the Service. We do not access your servers, messages, friends list, or any other Discord data, and we do not post to Discord on your behalf.

Content you create

• Saved map settings — your view preferences, so the map opens where you left it.
• Notes — any notes you attach to map locations.

This content is private to your account. No other user can see it.

Technical data

When you use the Service, our hosting provider automatically logs standard technical information: IP address, browser type, device type, pages visited, and timestamps. This is used for security, debugging, and keeping the Service running. We do not use it to build profiles of individual users.

What we don't collect

We do not collect payment information (Patreon handles that on its own site), location data beyond what's inferred from IP, or any data from your device beyond what your browser sends with every request.

2. How We Use It

• To create your account and let you sign in
• To save and restore your map settings and data
• To respond to support requests
• To send essential account messages (password reset, security notices, material changes to these terms)
• To keep the Service secure and detect abuse

We do not send marketing email. We do not use your data for advertising.

3. Cookies

We use session cookies to keep you signed in. These are necessary for the Service to function. We do not use advertising or cross-site tracking cookies.

4. Who We Share It With

We don't sell your data. We don't share it with advertisers. We share it only with the service providers that run the Service:

• Supabase — authentication and database hosting (stores your account, settings, and notes)
• Vercel — web hosting (processes requests and technical logs)
• Resend — sends account emails such as sign-up confirmations, sign-in links, and password resets (processes your email address)
• Google — if you sign in with Google, Google processes the sign-in on its side under its own privacy policy
• Discord — if you sign in with Discord, Discord processes the sign-in on its side under its own privacy policy

Each provider processes data only to provide its service to us. We may also disclose information if required by law or to protect the rights and safety of users or the Service.

5. Data Retention

Your account data and content are kept as long as your account exists. When you delete your account, your email, settings, and notes are permanently deleted. Technical logs are retained by our hosting provider for a limited period and then discarded.

6. Your Rights and Choices

• Access and update — view and change your email and password in account settings.
• Delete — delete your account and all associated data from account settings. This is permanent.
• Disconnect Google — you can revoke Inked Atlas's access from your Google account permissions page at any time.
• Disconnect Discord — you can revoke Inked Atlas's access in Discord under User Settings → Authorized Apps.

If you're in a region with specific data-protection rights (such as the EU/UK under GDPR or California under CCPA), you can exercise those rights by contacting us at the address below. We don't sell personal information, so there is nothing to opt out of in that respect.

7. Children

The Service is not directed to children under 13, and we don't knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll delete it.

8. Security

We use industry-standard measures — encrypted connections, hashed passwords, access controls on our data store — to protect your information. No system is perfectly secure; if we discover a breach affecting your data, we'll notify you.

9. International Users

The Service is operated from the United States and data is stored on servers in the United States. By using the Service you consent to your data being processed there.

10. Changes to This Policy

We may update this policy. When we make material changes we'll update the date above and, where practical, notify account holders by email. Continued use after changes take effect means you accept the updated policy.

11. Contact

Privacy questions or requests: admin@inkedatlas.art