Legal

Privacy policy

Last updated 24 October 2026

The short version. You can use the map without telling us anything. If you sign up, we keep your email address, your plan, and the places and trips you choose to save, so we can send your alerts. We don't sell your data or show you ads. Analytics only runs if you say yes.

Who is responsible for your data

[company name] (company number [company number], [registered address]) is the data controller for personal data collected through theliveatlas.com. Contact: [contact email]. ICO registration number: .

What we collect and why

Data	Why	Lawful basis	Kept for
Settings saved in your browser: map layers, your passport and destination, your watchlist, trips and alerts (if you aren't signed in)	To make the site work the way you left it. This stays on your device; we don't receive it.	Necessary for the service you asked for	Until you clear your browser data
Email address, sign-in tokens	To create your account and sign you in with a one-time link	Contract	While your account exists. Sign-in links expire after 20 minutes
Plan, billing status, and your customer and subscription IDs with our payment partner	To provide what you've paid for	Contract; legal obligation (tax records)	Account life; billing records 6 years
Watchlist, alert settings, trips (including traveller names and passport nationality you enter)	To send alerts and build trip briefings and, for Team, the duty-of-care log	Contract; for Team, the account owner's legitimate interests in looking after staff	While your account exists. Removed Team trips stay in the duty-of-care log until the account owner asks us to delete them
Notification settings, and a push address for each device you switch notifications on for (Pro)	To send phone and browser notifications. The address is made by your browser and contains no personal details; the alert text is fetched from us, not sent through the push service	Contract	Until you switch notifications off, or the device stops accepting them
Newsletter email address	To send The world this week	Consent (you can unsubscribe in every email)	Until you unsubscribe
Emails you send us	To reply and keep a record	Legitimate interests	As long as needed to deal with your message
Analytics (only if you accept)	To count visits and see which pages help people	Consent	Up to 14 months
Daily visit totals (no cookies)	To count, each day, how many times each page was viewed and which website or advert sent the visit. We keep totals only: no IP address, no cookie, nothing that identifies you	Legitimate interests (understanding which pages and adverts work)	Totals kept for 2 years
Where a paying customer came from (the advert or website that first brought you, kept in your browser for 90 days)	To see which adverts lead to subscriptions	Legitimate interests	With your billing records

We don't collect your location. Trip information you enter, such as a traveller's nationality, can reveal personal details, so only enter what's needed.

Who we share it with

We use these service providers, under contracts that require them to protect your data and use it only for us:

Cloudflare: hosting, security and our database.
Paddle and Gumroad: payments. As merchant of record they process your payment and handle tax, under their own privacy policies.
Resend: sending sign-in links, alerts and the newsletter.
Your browser's push service (for example Google, Apple, Mozilla or Microsoft): if you switch on notifications, it carries a wake-up signal to your device. No alert text goes through it.
Open-Meteo and MET Norway: weather. Your browser asks them for the forecast for places on the map; they see your IP address but nothing about your account.
Google Fonts: the site's typefaces load from Google, which sees your IP address.
Google Analytics, Google Ads, Meta, Microsoft Clarity and Microsoft Advertising tags, only if you accept those cookies.

Some of these providers process data outside the UK, including in the USA. Where they do, transfers are covered by the UK's adequacy regulations (such as the UK–US data bridge) or the ICO's international data transfer agreement or addendum.

We never sell your personal data. We'll only share it with others if the law requires it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time. Email [contact email] and we'll reply within a month. You can also delete your browser-stored data by clearing your site data.

If you're unhappy with how we've handled your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

Security

Connections are encrypted, sign-in links and API keys are stored only as secure hashes, and access to our systems is limited. No system is perfectly secure; if a breach affects you we'll tell you as the law requires.

Children

The Live Atlas isn't aimed at children under 13, and you must be 18 or over to buy a subscription.

Changes

If we make important changes to this policy we'll update the date at the top and, if you have an account, tell you by email.