Your location stays with you.
This is a plain-language description of what the site actually does, written to match the code rather than to cover us legally.
Your location
When you allow location access, your coordinates stay in your browser. Distance sorting is calculated on your device; the coordinates are never sent to or stored by Find Washroom. This is your precise browser location when the browser grants it, not an approximate city inferred by Find Washroom.
Manual place search sends only the place name you typed to the applicable public geolocation service. Your live device location is not included.
Google sign-in and My Washroom Trail
The finder, guides and Washroom Map work without an account. My Washroom Trail requires Google sign-in. Google supplies Supabase with your account identifier, email address and basic profile information such as name or profile image; Find Washroom never receives your Google password.
Supabase stores the washroom ID, name, address, coordinates, visit time, action that saved it, and any linked review state. Row-level security limits Trail rows to the signed-in user. Opening Google Maps while signed in counts as a visit; your travelled route and live device coordinates are not stored in the Trail.
Browser storage
The browser stores your language choice, the Supabase session needed to keep you signed in, and a random device identifier used for anonymous reviews. A Trail from the older on-device version is uploaded once after your first sign-in and then removed from local storage.
Signing out removes the local account session. It does not delete Trail rows already stored in your private account.
Reviews and ratings
Community reviews remain pseudonymous and separate from your Google account. We store the review text, score, reaction, language and washroom. Reviews are tied to a one-way HMAC-SHA256 hash of the random device identifier, not the identifier itself.
A separate one-way hash derived from that identifier and the request IP is used only for rate limiting. The raw IP is not stored. You can delete your own review from the card where it was posted.
Correction reports
The correction form stores the Find Washroom page URL, location name and address, issue category, your description, an optional supporting link, language and submission time. It does not ask for your name or email.
A one-way HMAC hash derived from the request IP is stored for spam control; the raw IP is not stored. Reports remain in a private editorial queue while evidence is checked and the affected record is corrected, resolved or rejected.
Third parties
Supabase provides authentication and private Trail storage; Google provides sign-in, directions and AdSense advertising. OpenStreetMap provides map tiles. jsDelivr and unpkg deliver icon and map libraries. These services receive the normal request information described in their own privacy policies, including an IP address. Depending on the provider, normal request information can also include browser, device and network details.
Find Washroom requests only Google’s basic openid, email and profile scopes. It does not request access to Google Drive, contacts, calendar or other Google account content.
Your choices and deletion
You may decline location and search manually. You may use every public finder and map page without signing in. In Trail settings you can clear all Trail stops, sign out, or permanently delete the Trail account; account deletion removes the Google-linked Supabase user and cascades to its private Trail rows.
You can also delete your reviews and clear this site’s browser storage. Revoking Find Washroom in your Google Account security settings stops future Google authorization but does not by itself delete data already stored in Supabase.
Changes
If the site’s data handling changes, this page and the updated date below change with it.
Last updated: