Privacy Policy

Effective October 15, 2026

This policy explains what personal data Milestone Project (“we”, “us”) collects through the milestoneproject.io website, Milestone Plans and Milestone Maps (the “Services”), how we use it, and your choices. It’s part of our Terms of Service. We act as the controller of the data described here. Contact: info@milestoneproject.io.

What we collect

• Account data. Your email address and the public half of your passkey (we never receive your biometrics or the private key), plus the sign-up and sign-in times needed to run your account. Each product keeps its own accounts.
• Content you create. In Plans, your plans and their saved versions. In Maps, your API keys, their allowed domains, and per-key usage counts.
• Maps requests. The queries you send to the API and tiles you load, which can contain coordinates, place names or addresses, together with the API key used. We use these to answer them and to count usage; we don’t build profiles of end users of apps built on the API.
• Payment data. If you buy a paid plan, Stripe collects your card or other payment details, billing name, address and tax details. We receive from Stripe a customer ID, plan, payment status, the card brand and last four digits, and billing country or postcode for tax. We don’t receive or store full card numbers.
• Technical data. Our servers log your IP address, request time and path, browser or client type, and errors, to run, secure and debug the Services.
• Website analytics. Only if you accept analytics on the marketing site: pages viewed, approximate location from your IP address, device and browser, referrer and similar usage data, collected by Google Analytics (see Cookies below).
• Messages. What you send us when you email us.

Why we use it

• To provide the Services: sign you in, store your plans, answer API requests, enforce limits and show usage (contract).
• To bill you, collect taxes and prevent payment fraud (contract, legal obligation, legitimate interests).
• To send essential messages, such as sign-up confirmations, receipts, security and service notices (contract, legitimate interests). We don’t send marketing email without your consent.
• To keep the Services secure, prevent abuse and fix problems (legitimate interests).
• To understand and improve our website, only with your consent (consent).
• To meet legal obligations and to establish or defend legal claims.

We don’t sell your personal data, we don’t share it for cross-context behavioral advertising, and we don’t use it for advertising.

Who we share it with

Only service providers acting on our behalf, and only what they need:

• Stripe — payment processing, subscriptions, invoicing and tax calculation. Stripe is also an independent controller for its own fraud-prevention and legal compliance; see stripe.com/privacy.
• Hosting and infrastructure providers — to run our servers, databases and the website.
• Email delivery provider — to send transactional email such as sign-up confirmations and receipts.
• Google — Google Analytics on the marketing site, if you accept analytics.

We may also disclose data if the law requires, to protect rights, safety and security, or to a buyer in a merger, acquisition or sale of the business (we’ll tell you if your data is then handled under a different policy).

Cookies and similar technologies

The apps use strictly necessary cookies to keep you signed in, and local storage for display preferences. On the marketing site we ask before using Google Analytics, which sets cookies. We ask first, load nothing from Google until you accept, and switch it off (and delete those cookies) if you decline or later change your mind via “Cookie settings” in the footer. We turn off Google’s advertising features and signals. Details are on our Cookies page.

International transfers

We and our providers operate in the United States and elsewhere, so your data may be processed outside your country. Where the law requires, we rely on safeguards such as the EU Standard Contractual Clauses or the providers’ participation in the EU–US Data Privacy Framework.

How long we keep it

• Account data and your content: while your account is open, and deleted within 30 days of you closing it (backups roll off within a further 35 days).
• Billing records: as long as tax and accounting law require (typically up to 7 years).
• Server logs: up to 90 days, unless needed longer to investigate abuse or an incident.
• Google Analytics data: 14 months.

Your rights

Depending on where you live (including the EU/UK under the GDPR and California under the CCPA/CPRA), you may have the right to access, correct, delete or export your data, to object to or restrict some uses, to withdraw consent at any time, and not to be treated worse for using these rights. Email us to use them; we may need to verify your identity first. You can delete your plans and API keys yourself in the products. If you think we’ve mishandled your data you can complain to your data protection authority; we’d appreciate the chance to fix it first.

We don’t respond differently to “Do Not Track” signals, but we honor the choice you make in our consent banner and, where the law requires, browser-based opt-out signals such as Global Privacy Control.

Security

Sign-in uses passkeys, so there are no passwords to steal or reuse, and data is encrypted in transit. No system is perfectly secure; if a breach affects you, we’ll notify you and regulators as the law requires.

Children

The Services aren’t for anyone under 18, and we don’t knowingly collect data from minors. If you think a minor has given us data, email us and we’ll delete it.

Changes

We’ll post any update here with a new effective date and, for material changes, notify account holders by email or in the product.

Contact

Questions or requests: info@milestoneproject.io.