Privacy Policy
This policy explains what personal data Master the Map collects, why, and what rights you have over it. Master the Map is built for individual first responders and fire, police, and EMS departments to practice street layouts — it does not track your physical location, and it collects meaningfully less data than most consumer apps.
Who we are
Master the Map is operated by Barn30 Commv (company number BE0633587370, Humbeekseweg 30, 2811 Hombeek, Belgium; contact: info@barn30.be). For any privacy question, including the requests described below, this is the address to use.
What we collect
| Data | Why |
|---|---|
| Email address | Account sign-in (by password, or through Google or Microsoft if you choose that), and the only way we contact you about your account or a purchase. |
| Department name, roster, and roles | So a department's admin can manage its own team and see who belongs to it. |
| Quiz results (correct/incorrect counts, personal best, last practiced date) | To show your own progress, and — for department admins only — their team's training progress. |
| Language preference | So the app displays in the language you last chose. |
| Purchase records (plan, seat count, price, currency, department name) | Billing history and receipts. Your card details are never seen or stored by us — Stripe, our payment processor, handles this directly. |
| Billing address and VAT number (entered at checkout) | Collected by Stripe so the correct VAT can be calculated. We receive these details (name, organisation, billing address, VAT number, amounts) to issue your invoice and for our accounting. |
| Email address used for a free trial | The individual free trial can be used once per email address. We keep a record of the email addresses that have started a trial so the trial can't be repeated. |
| Anonymous page-view counts | Which pages get visited and roughly where visitors come from, with no cookies and nothing that identifies you personally. |
What we deliberately don't collect: your physical, real-world location. The app's "map" is street data you choose to study (any city, any district) — it has no reason to know or store where you actually are, and it doesn't ask for that permission.
Cookies
Master the Map does not use cookies — not for tracking, not for advertising, not for analytics. The only client-side storage is your browser's own localStorage, used solely to remember a small number of your own preferences on your own device (such as your last-used language, or whether you've dismissed a training reminder for the day). Nothing in that storage is sent to us or to any third party, and none of it is used to track you across sites.
Who we share data with
We don't sell your data, ever. A small number of service providers process data on our behalf, strictly to run the app:
- Supabase — our database and authentication provider, hosted in the EU. This is where your account and department data actually lives.
- Google and Microsoft — only if you choose "Continue with Google" or "Continue with Microsoft" to sign in. Signing in happens on their own pages, where their own cookies and privacy terms apply; they confirm who you are and pass us your email address (and basic profile details such as your name). We send them nothing about your training or your department.
- Brevo — sends our transactional emails (account confirmation, password reset, and notifications about your account or purchase). Brevo is a European email service provider; it receives your email address and the content of those emails, and nothing about your training.
- Stripe — handles payment processing directly, including calculating VAT from your billing address and VAT number. We never see or store your full card number.
- Yuki (Visma) — our accounting software, in which we issue invoices. It receives the invoice details of a purchase (name, organisation, billing address, VAT number, amounts); invoices to Belgian businesses and public bodies are sent through the Peppol network.
- Microsoft 365 and Slack — our own e-mail and internal messaging, where we receive a notification of each purchase with those same invoice details, so we can issue the invoice.
- OpenFreeMap / OpenStreetMap — the map tiles themselves are loaded directly by your browser from OpenFreeMap's servers, using publicly available OpenStreetMap data. No account information is sent to them.
- Nominatim (OpenStreetMap's search service) — only if you use the location search box to find a city or address; your search text and IP address reach their servers to return a result, the same way any map search works.
Where your data is stored
Your account and department data is stored on Supabase infrastructure in the EU.
How long we keep it
We keep account and department data for as long as your account is active. If you delete your account (see below), your personal data is removed. Purchase records are kept longer where required for accounting and tax purposes, but are no longer linked to your active use of the app. The email address recorded for a free trial is kept so that the trial can't be used again, even if the account itself is deleted.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct it, if anything is wrong.
- Delete your account and associated personal data ("right to erasure").
- Export your data in a portable format.
- Object to how it's processed, or ask us to restrict processing.
To exercise any of these rights, email info@barn30.be. We'll respond within 30 days. If a self-serve option for export or deletion becomes available directly in your account settings, this page will be updated to reflect that.
You also have the right to lodge a complaint with your local data protection authority if you believe your data has been mishandled.
Department admins and their members' data
If you're a department admin, you can see your team's names, emails, and quiz progress — that visibility is limited to your own department, and exists so you can support your team's training. If you're a member of a department, your admin's ability to see this is part of how the product works for organizations; if you have concerns about this, contact your department admin directly, or reach us at the address above.
Children's privacy
Master the Map is a professional training tool built for adult first responders and department staff. It is not directed at children, and we do not knowingly collect data from anyone under 16.
Changes to this policy
If this policy changes materially, we'll update the date at the top of this page. Continued use of Master the Map after a change means you accept the updated policy.
Questions about this policy, or a request under any of the rights above? Email info@barn30.be.