FacilMap aims to be a privacy-friendly open-source alternative to commercial maps that track your data.
FacilMap is a combination of services provided by FacilMap itself and third-party services based on OpenStreetMap. Each of these services might retrieve and store different data about you.
# FacilMap itself
The following data is sent to the FacilMap server but is not persisted there:
- Your IP address: When you open FacilMap, a connection to the server is made, which inevitably reveils your IP address to the server. FacilMap uses your IP address to guess your location using the MaxMind GeoLite2 (opens new window) database (to decide the initial map view), but it uses a local copy of that database rather than sending your IP address to MaxMind.
- Your map position: When you have a route or a collaborative map open, the current map position is sent to the server every time you move/zoom the map. (In response, the server will send any map objects in your current map view.)
- Your search term: When you search for a place, open a map point or calculate a route, the search term is sent to the FacilMap server and relayed to third-party services from there.
The following data is sent to the FacilMap server and persisted there:
- When you calculate a route, the details about this route are stored on the server until you close the route (or your browser window) again.
- Any markers, lines, types, views that you add and any map settings that you make on a collaborative map is stored on the server. Deleting such objects will still keep a copy in the change history. The only way to delete the data is to delete the collaborative map.
The following data is persisted in your browser:
- If you change the zoom settings, these are persisted in the local storage of your browser.
- If you add bookmarks, these are persisted in the local storage of your browser.
Base layers and overlays are embedded from the third-party services listed under map styles. When you enable a particular map layer, the following data is sent to the provider of that layer:
- Your IP address
- Your map position
- Any cookies that the provider might have set (unless you have third-party cookies disabled in your browser)
FacilMap does not have any control over what these providers do with your data, but makes a best attempt to not rely on any providers that are known for tracking you.
When you make a search, calculate a route or open a map point, the search is relayed through the FacilMap server to the third-party provider. This means that only the search terms itself are sent to the provider, but your IP address or any cookies are not reveiled to the third party. The following providers are used:
- Nominatim (opens new window) to resolve search terms or locations
- Mapbox (opens new window) for routes with a simple route mode
- OpenRouteService (opens new window) for routes with an advanced route mode
# External links
Search results and markers/lines may contain links to external websites as part of their details. FacilMap directs such links through a dereferrer page to make sure that the URL of the map you had open is not leaked to the destination of the link.
# Your location
When showing your location on the map, FacilMap uses the GeoLocation API to ask your browser for your location. It is beyond the control of FacilMap how your browser will find out your location.
Wikipedia contains some information (opens new window) about how browsers determine your location. Usually your browser will send the names and IDs of WiFi networks that your device can receive, your IP address and (if applicable) the ID of your mobile network cell to a third-party provider. Unfortunately, these third-party providers seem to be mostly big companies that collect a lot of data.