Privacy Policy
Last updated: 10 August 2026
Starting draft: review (and ideally have counsel check) before public launch. Set a real contact address and legal entity name where marked.
Geomaxxing (“we”, “us”) is a data-driven relocation research tool. This policy explains what we collect, why, how long we keep it, and who we share it with. We collect the minimum needed to run the service and improve it — nothing sold, no ad networks.
What we collect
| Data | Why | How long |
|---|---|---|
| Email address (via Google sign-in or magic link) | Create your account and grant your “Pro” access | While your account/unlock exists |
| Sign-in cookies (session, OAuth state, admin) — HttpOnly | Keep you signed in securely | Session token up to 30 days; short-lived state cookies |
Pricing cookie (geo_ab) | Keep the price you are shown the same on every visit | Up to 90 days |
| Attribution & usage events — campaign/referral source, a coarse IP (network prefix only, host portion removed), browser user-agent, timestamps | Understand which channels bring visitors and where they drop off | Raw event log expires after 90 days; checkout attribution after 45 days; aggregate per-campaign counts are non-identifying and retained |
| Mailing-list record — your email, plus what you consented to, when, the page you signed up from, a coarse IP and user-agent | Send you the updates you opted in to, and prove that opt-in if asked | Until you unsubscribe; the record is then marked unsubscribed and kept as proof of the request |
| Payment records (Stripe session/customer ids, amount, status) | Fulfil and support your purchase | As required for accounting/records |
| Subscription records, if you buy a monthly plan: Stripe subscription and customer id, status, and the date your paid period ends | Keep your access switched on for as long as you are paying, and switch it off when you stop | While the subscription exists, then with the payment records above |
| Aggregate web analytics (page views, referrers, country) via Cloudflare Web Analytics | Measure traffic and performance | Cookieless and aggregated — not tied to your identity |
We do not collect or store your card details. Card entry happens entirely on Stripe’s hosted checkout.
Signing in subscribes you to the list. When you sign in — by email link or with Google — we add your address to our updates list, and the sign-in form says so above the button. You get an email when a new country or city dataset lands, about twice a month. Buying Pro on its own does not subscribe you. Every list email carries a one-click unsubscribe that works without signing in, and unsubscribing takes effect immediately. Sign-in links and purchase receipts are not marketing and keep working either way.
Who we share it with (processors)
- Google — “Sign in with Google” authentication.
- Stripe — payment processing, and the billing portal where you manage or cancel a subscription and read your invoices (their privacy policy).
- Resend — delivering sign-in emails and, if you opted in, list updates.
- Cloudflare — hosting and privacy-first, cookieless web analytics.
- Cloudflare Turnstile — bot verification on the sign-in, feedback and mailing-list forms. Turnstile receives your full IP address and browser signals in order to score the request. This is the one place the IP is not coarsened, because the check requires the real address.
These providers process data on our behalf to deliver the service. We do not sell personal data or share it for advertising.
YouTube API Services
We publish our own short videos to our own YouTube channel, and we use YouTube API Services to upload them. This happens on our side only, from a command-line tool we run ourselves. No visitor data is sent to YouTube. The tool uploads a video file and its title; it reads nothing about you, and it has no access to your YouTube account or ours beyond permission to upload.
By using Geomaxxing you agree to the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy. You can review and revoke any access you have granted to third-party applications, including ours, at the Google security settings page.
We store no YouTube user data. If any is ever received in error it is deleted immediately, and you can ask us to confirm that at [email protected].
Legal basis & your choices
We process account and payment data to provide a service you request, and attribution/analytics data for our legitimate interest in understanding and improving the product (kept minimal and time-limited).
You can request access to, correction of, or deletion of your personal data — including your account and unlock record — by contacting us. Deleting your account removes your email and entitlement; anonymised aggregate counts may remain.
If you have a subscription, cancel it before deleting your account. Your account record is the only thing linking that subscription to you, so deleting it while billing is still live would leave your card charged with nothing to show for it. Cancel under Manage billing on the Pro page; deletion works straight away after that, and you keep access until the period you already paid for ends.
Cookies
We use only first-party, functional cookies: authentication (keep you signed in), OAuth state (sign-in security), and the pricing-experiment cookie. We use no third-party advertising or cross-site tracking cookies. Our analytics are cookieless.
Children
Geomaxxing is not directed to children under 16, and we do not knowingly collect their data.
Changes
We may update this policy; material changes will be reflected in the “last updated” date above.
Contact
Questions or data requests: [email protected].