Privacy Policy

1. Who we are

The service is operated by Unakin LLC, located in Washington, USA. For any privacy question, access or deletion request, contact us at [email protected].

2. What we collect

• Account data.When you sign in we use a passwordless “magic link,” so we store your email address and the profile you create (handle, display name, bio, avatar). We do not store passwords.
• Content you publish. The panoramic, 360° and 180° media you upload, plus titles, locations, descriptions, comments, and the spatial tags (annotations) you place. Published content is public by design — anyone, including logged-out visitors, can view it.
• Location data.If your capture includes geographic information (latitude, longitude, heading), or you log a geocache “find” with coordinates, we store it to power maps, bearings and the discovery features. Precise location is sensitive— see “Your choices” for how to limit it.
• Activity & engagement. Likes, saves, follows, finds, reports and blocks you create, so the social features work and so we can keep the community safe.
• Usage telemetry. We record product events (for example: viewing the feed, entering a capture, dragging to explore, publishing) tied to an anonymous per-tab session identifier, to understand what works and improve the product. This is not tied to your email unless you are signed in.
• Technical data. Standard server and security logs (such as IP address and approximate region, browser type, and timestamps) generated by our hosting and database providers.

3. Why we use it (legal bases)

• To provide the service — sign-in, publishing, the social graph (performance of a contract).
• To keep the community safe — reports, blocks, moderation and abuse prevention (legitimate interests; legal obligation).
• To improve the product — aggregate analytics on how features are used (legitimate interests; or consent where required).
• To communicate with you — sign-in links and essential service notices.

4. Who we share it with

We share data only with the service providers (processors) that run Panogram:

• Supabase — database, authentication and media storage.
• DigitalOcean — application hosting.
• Resend — transactional email (for example, sign-in links).
• Analytics provider — product usage measurement, where enabled.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights and safety of users and the public. We do not sell your personal data.

5. Cookies & similar technologies

We use a small number of cookies and local browser storage that are necessary to keep you signed in and to remember preferences (such as which notifications you have seen). Our analytics may set its own identifiers; where the law requires consent for non-essential tracking, we will ask for it.

6. How long we keep it

We keep account and content data while your account is active. If you delete content or your account, we remove or de-identify the associated personal data within a reasonable period, except where we must retain it to comply with the law, resolve disputes, or enforce our agreements. Moderation records (reports and their outcomes) may be retained to keep the platform safe.

7. Your choices & rights

• Access, correction, deletion. You can edit your profile and content in-app, and request access to or deletion of your personal data by emailing [email protected].
• Location. You can publish captures without precise coordinates; remove location from media before uploading if you do not want it shared.
• Blocking. You can block other users so their content is hidden from you.
• Regional rights. Depending on where you live (for example the EEA/UK under GDPR, or California under the CCPA/CPRA), you may have additional rights, including to object to or restrict processing, to portability, and to lodge a complaint with your data-protection authority.

8. Children

Panogram is not for people under 13 (or the minimum digital-consent age in your country, where higher). We do not knowingly collect data from children below that age; if you believe a child has provided us data, contact [email protected] and we will delete it.

9. International transfers & security

Our providers may process data in countries other than yours; where required we rely on appropriate safeguards for those transfers. We use technical and organizational measures — including row-level security on our database, authenticated-only uploads, and encrypted secrets — to protect your data, though no system can be perfectly secure.

10. Changes

We may update this policy as the product evolves. Material changes will be reflected by the “last updated” date above and, where appropriate, an in-app notice.