Back to mapSlideScout

Privacy

Plain English. No legalese.

  • We don't sell your data, full stop.No advertisers, no analytics resellers, no "data partners".
  • Sign-in is for parents.Kids don't need an account. When you log a visit you can rate as a parent andon behalf of the crew. We don't collect accounts for under-13s.
  • We use Cloudflare Access with Google loginfor sign-in. From Google we receive your email address and name. We store your email and name on the visits you log. That's it.
  • Visits are public: anyone can read what you wrote. We anonymise how your name displays: "Sarah M.", not "Sarah Macdonald".
  • Some reviews are seeded from Google Maps.Those reviews show a "Google" badge so you know where they came from. We're working towards the majority being your own reviews instead.
  • We use Cloudflare for hosting and DDoS protection. They see request metadata (IP address, user agent, the URL you hit) like every website does.
  • International data transfer:Cloudflare and Google are US-based, so signing in means your name and email pass through their servers. We've no other off-shore data processors.
  • Map tiles come from OpenStreetMap. Photos are served from our own server in New Zealand.
  • Photos:When you upload a photo, we strip EXIF metadata (GPS coordinates, camera serial etc.) before saving. Your uploads are public on the playground page they're attached to.
  • Profile details: If you set a display name or upload a profile picture, we store them with your account. Used to show your visits under your chosen name and picture. Removable anytime via your profile page.
  • Analytics, plainly stated. We use Google Analytics 4 and Microsoft Clarity(loaded via Google Tag Manager) to understand how people use the site: which playgrounds get looked at, where they came from, what broke. We do not use it for ads. We don't sell or share the data. No Facebook pixel, no Hotjar, no other third-party trackers.
  • What those tools see:GA4 sees aggregate page views, device type, referrer, and an anonymised ID stored in a cookie. Clarity sees the same plus heatmaps and session replays that show where people clicked. Both can be turned off by your browser's "Do Not Track" or any standard ad blocker and the site will still work.
  • Submissions:When you submit a missing-playground report or feedback, we store what you sent plus your IP (redacted to a /24) and user agent. If you're signed in, your email is attached so we can follow up. Used only to act on the report; not sold or shared.
  • Signed-in user tracking:When you sign in, we record your email, when you first signed in, when you last visited, your sign-in count, and your last device's user agent and IP (truncated to a /24 prefix). Used solely for site administration. Not sold or shared.
  • Cookies:the Cloudflare Access auth cookie when you're signed in, a small one to remember if you've dismissed the welcome card, plus first-party analytics cookies from GA4 (`_ga`, `_ga_*`) and Clarity (`_clck`, `_clsk`). No third-party tracking cookies, no ad cookies.

Your rights under the NZ Privacy Act 2020

You can email [email protected] and ask us to:

  • See what we holdabout you (your account email, the visits you've logged, the photos you've uploaded).
  • Correct itif anything's wrong.
  • Delete it.We'll remove your visits, photos, and account record.
  • Complain to us first, or directly to the Office of the Privacy Commissioner if you're not happy with our response.

We aim to respond within 20 working days, as the Act requires.

Last updated: 25 April 2026.

Questions? Email [email protected].

On the to-do list

We're a small project, not a corp, but we want to do the right thing. Things we're working towards:

  • In-app deletion: a settings page where you can remove your visits and account without emailing us.
  • Active moderation:once people start using the site, we'll set up a moderation queue and a way to report problem content.