Privacy Policy
Last updated 29 July 2026
Atlasly is a scratch-off world map for tracking where you've been, saving places you want to go, and planning trips with other people. This page explains what we collect, why we collect it, and what control you have. It is written by the Atlasly team and is not an independent audit or certification.
Who we are
Atlasly ("we", "us") operates atlasly.world. You can reach us at hello@atlasly.world for any privacy question or request.
What we collect
- Account details. Your email address, and — if you sign in with Google — the name and profile image Google returns. Passwords are handled by our authentication provider and never stored by us in readable form.
- Your atlas content. Countries you scratch, places you save, trips and trip blocks you create, invites you send, and any notes or dates you add.
- Imports. Google Maps links you paste and places you add manually, so we can extract place names and locations from them.
- Technical data. Basic request information such as IP address and browser type, used for security, rate limiting, and abuse prevention.
- Product analytics. Privacy-friendly, cookie-less page and event analytics that tell us which features get used. We do not build advertising profiles and we do not sell your data.
Why we use it
- To create your account and keep you signed in.
- To store and display your atlas, wishlist, and trips across your devices.
- To generate itinerary suggestions and best-time-to-go windows when you ask for them.
- To share a trip or atlas with people you explicitly invite or send a link to.
- To protect the service against abuse, spam, and automated scraping.
- To send you service email such as sign-in links and trip invitations.
Sharing and processors
We don't sell personal data. We do rely on a small set of service providers who process data on our behalf:
- Our hosting and database platform, which stores your account and atlas data.
- Our payments provider, which handles subscription checkout and billing data.
- Our AI model provider, which processes trip-planning prompts you submit.
- Our email provider, which delivers account and invitation email.
- Our analytics provider, which receives aggregate, cookie-less usage events.
Content you deliberately publish — a read-only atlas link, a public trip link, or a vanity handle — is visible to anyone holding that link until you revoke it.
Retention
We keep your account data for as long as your account exists. If you delete your account, your atlas, wishlist, trips, and imports are deleted with it. Backups and anonymised aggregate analytics may persist for a limited period afterwards.
Your rights
You can access, correct, export, or delete your data. Most of it is editable directly in the app; for anything else, email hello@atlasly.world and we'll action the request. Depending on where you live, you may also have the right to object to processing or to complain to your local data protection authority.
Security
Traffic is encrypted in transit. Access to your rows is enforced at the database level so that one account cannot read another's data, and privileged operations run server-side only. No system is perfectly secure — if you believe you've found a vulnerability, please report it to hello@atlasly.world before disclosing it publicly.
Children
Atlasly is not intended for children under 13, and we don't knowingly collect their data.
Changes
We'll update this page when our practices change and revise the date at the top. Material changes will also be announced in-app or by email.
See also our Terms of Service.