Privacy
BlurMap moves your phone's location. Your location is the most sensitive thing we could hold, so BlurMap is built so that we never receive it.
What we store
- Your email address.
- Your password, stored hashed by our account provider, Supabase (never the password itself).
- Your plan and when it ends.
What we never see
The BlurMap iPhone app sets your location on the phone itself, through LocalDevVPN running on that same phone. Your locations, searches, routes and saved places stay on your iPhone and are never sent to us.
BlurMap Setup and your Apple ID
BlurMap Setup signs the iPhone app with your own Apple ID. Your Apple ID password goes from your computer directly to Apple and is saved only in your computer's keychain, so you don't have to type it every week. It is never sent to us.
Apple sign-in needs device identification data called "anisette". By default Setup gets it from ani.sidestore.io, run by the SideStore project; you can pick another server in Setup's settings. That server sees your IP address, not your Apple ID or password.
The iPhone app downloads Apple's developer disk image from a public GitHub repository when your phone needs it.
Maps and search
The iPhone app uses Apple Maps for the map, place search and road routes, so those requests go to Apple under Apple's privacy policy. The web control panel uses OpenStreetMap services (map tiles, Nominatim search, OSRM routing) directly from your browser. Those services can see your IP address and what you ask for.
Cookies and storage
When you log in on this site, your session is kept in your browser's local storage so you stay signed in. We use no advertising or analytics trackers.
Deleting your data
Email us from your account address and we will delete your account, including your email, password hash and plan record.