Invader Is Here is a free, non-commercial community project run by an individual maintainer, who is the data controller for the information described here. This policy explains what data we collect, why, and what you can do about it. We keep data collection to the minimum needed to run the site, and we never sell it. You can reach us any time at hello@invader-is-here.xyz.
What we collect
- Account details — your email address (used to sign in and contact you about your account), and the public handle and avatar you choose. You can sign in with email and a password, or with Google or Apple.
- Content you submit — photos you upload, and any details attached to them, including the location and date of an artwork. Location comes from the photo’s metadata, the pin you drop, or — with your permission — your device’s current location.
- Technical data — basic logs (such as IP address and browser type) created automatically when you use the site, used for security and to keep it running.
- Usage & diagnostics — if you accept analytics cookies, we collect anonymous usage events (which pages and features you use) and basic performance and error data, to understand how the site is used and to fix problems. See cookies below.
Location data
Mapping artworks means handling locations. The location of an artwork you submit is published publicly on the map. We only use your device’s current location if you grant the browser permission, and only to help place a pin — we don’t track you in the background.
How we use your data
- To run the site — show the map and gallery, and let you contribute.
- To attribute contributions to your handle.
- To keep the site secure and prevent abuse.
- To respond to you if you contact us.
- To understand which areas of the site are used, so we can improve it (with your consent).
- To monitor performance and diagnose errors.
Our legal basis is your consent (for analytics cookies — which you can withdraw any time) and our legitimate interest in running, securing, and improving a community map (including diagnosing errors).
What’s public
Your handle and avatar, the photos you submit, and the artwork locations and dates you add are visible to everyone. Your email address is never shown publicly. Don’t upload anything you wouldn’t want to be public.
Photos can sometimes capture other people or private property in the background. Please don’t upload a photo that identifies someone without their permission — and if a photo includes you and you’d like it removed, email us and we’ll take it down.
Who we share it with
We don’t sell your data or share it for advertising. We use trusted service providers to operate the site:
- Google Firebase hosts the site and stores accounts, data, and uploads.
- Google Maps powers the map and looks up addresses.
- Google Analytics processes anonymous usage events to show us how the site is used — only if you accept analytics cookies.
- Bugsnag collects error and performance data so we can fix problems and keep the site reliable — no session recordings are made.
We may also disclose data if required by law.
Where your data is stored
Some providers store and process data outside the UK and EEA — Google (Firebase, Maps, Analytics) and Bugsnag (error monitoring) operate globally. Where data is transferred internationally, it’s protected by safeguards such as adequacy decisions or standard contractual clauses.
Cookies & local storage
Essential cookies and local storage keep you signed in and remember basic preferences (such as light or dark mode) — these are always on. Analytics storage — Google Analytics cookies, and a Bugsnag device identifier kept in local storage — is only set if you accept it in the cookie banner; decline and it’s never set, and the site works exactly the same. We don’t use advertising cookies. Google Maps may set its own cookies when the map loads.
If you decline, Google Analytics may still receive anonymous, aggregated signals with no cookies or identifiers (Google Consent Mode); Bugsnag isn’t loaded at all.
You can change your choice any time:
Retention
We keep your account and content while your account is active. If you delete your account or ask us to remove your content, we’ll delete it, except where we need to keep something to comply with the law.
Your rights
You can access, correct, or delete your data, object to how we use it, or ask for a copy. You can edit your handle and avatar in your account settings, and contact us to delete your account. To exercise any right, email hello@invader-is-here.xyz. If you’re in the UK or EU, you also have the right to complain to your local data protection authority.
Children
The site isn’t intended for children under 13, and we don’t knowingly collect their data.
Security
We take reasonable steps to protect your data, but no online service can be completely secure.
Changes
We may update this policy. We’ll change the date above when we do.
Contact
Questions or requests? Email hello@invader-is-here.xyz.