Privacy Policy

PlotMyPub · Last updated 28 July 2026

PlotMyPub lets you rate pubs and see them on a map with a small group of friends. This policy explains what personal data we hold, why we hold it, who else sees it, and what you can do about it. We have tried to keep it short and specific rather than long and vague.

1. Who is responsible for your data

[CONTROLLER NAME] is the data controller for PlotMyPub. You can reach us at [CONTACT EMAIL].

We are based in the United Kingdom, so we are regulated under the UK GDPR and the Data Protection Act 2018. If you are in the EEA, the EU GDPR applies to you and gives you the same rights described below.

2. What we collect

Everything below comes either from you directly or from your use of the app. We do not buy data about you, and we do not run advertising or analytics trackers.

What	Where it comes from
Email address	You type it to get a sign-in link, or it comes from your Google account if you sign in with Google.
Display name	You choose it when you first sign in. It is shown to everyone in your groups.
Group membership	Which groups you belong to, when you joined, and any group you created.
Your pub ratings and notes	Scores you give for location, beer, value, facilities and vibe, plus any free-text note, and the date and time you saved it.
Pubs you add	The pub name and area you type, and the coordinates, city, country and elevation we look up from them.
Photos	Any photo you choose to attach to a rating.
Progress data	Your XP, level, achievements and the badges you pin.
Your device location	Only if you tap the locate button and allow it in your browser. See section 6.
Technical data	Standard server logs kept by our hosting providers, including your IP address, browser type and the time of your request.

Please be aware of what your ratings add up to. Each rating records which pub you were at and when. Taken together, your rating history forms a record of places you have visited over time, linked to your name and visible to everyone in your group. Only add ratings you are comfortable sharing with the people in that group.

3. Why we use it, and our legal basis

Under the UK GDPR we must have a lawful basis for each use of your data. Ours are:

Purpose	Data used	Legal basis
Creating your account and signing you in	Email, display name	Contract — we cannot run the app for you without it
Showing your ratings, pubs, photos and scores to your group	Ratings, notes, pubs, photos	Contract
Placing pubs on the map	Pub name and area you type	Contract
Awarding XP, levels and achievements	Rating history, pub locations, timestamps	Contract
Displaying the interactive map	IP address (shared with Google — see section 4)	Legitimate interests — the app is a map; it cannot work without one
Showing your live position on the map	Device location	Consent — you opt in, and can withdraw at any time
Keeping the service secure and working	Technical data, server logs	Legitimate interests — preventing abuse and diagnosing faults

We do not use your data for advertising, profiling or automated decision-making, and we never sell it.

4. Who else sees your data

Other people using PlotMyPub

Members of a group you belong to can see your display name, your ratings and notes, your photos, the pubs you have added, and your XP, level and achievements. People outside your groups cannot see any of it. Anyone holding your group's invite word can join that group and will then see this information, so share invite links carefully.

Service providers

We rely on a small number of companies to run the app. They process data on our instructions:

Supabase — hosts our database, sign-in system and photo storage. They hold everything listed in section 2.
GitHub Pages — serves the app itself. Receives your IP address as part of normal web hosting.
Google Maps Platform — draws the map, and looks up pub names to find their coordinates. When the map loads, your browser contacts Google directly, so Google receives your IP address and may set its own cookies. Google's handling of that data is covered by the Google Privacy Policy. If you sign in with Google, Google also knows that you use PlotMyPub.
BigDataCloud and Open-Meteo — when a pub is added, we send that pub's coordinates to these services to find its city, country and elevation for the achievement badges. We do not send them your name, email or any other detail about you, and we never send them your device location.

We may also disclose data if we are legally required to, or to protect our rights or someone's safety. We will not otherwise share it with anyone.

5. Where your data is held

Your account data, ratings and photos are stored by Supabase in [SUPABASE REGION].

Some of our providers are based outside the UK and EEA, or operate global infrastructure. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses, or on UK adequacy regulations where the destination country has them.

6. Location

There are two different things here, and it is worth keeping them apart.

Your live device location is used only to draw the blue dot showing where you are and to centre the map on you. It is requested only after you tap the locate button and grant permission, it is held in your browser's memory for as long as the map is open, and it is never sent to us, never stored, and never shared. Turning the permission off in your browser settings stops it immediately.

Pub locations are different. When you rate a pub, that pub's location is saved permanently alongside your name and the date, and is visible to your group. That is the core of what the app does.

7. Photos

Photos you attach are stored privately and are viewable only by members of the group they were posted in, through short-lived links. They are not public and are not indexed by search engines.

If you photograph other people, please make sure they are happy for you to share the picture with your group. If you appear in a photo someone else uploaded and want it removed, contact us at [CONTACT EMAIL] and we will remove it.

8. Cookies and local storage

PlotMyPub sets no advertising or analytics cookies. We use your browser's storage only for things the app cannot work without:

a sign-in token, so you stay signed in between visits;
the last group you opened, so the app returns you there;
an invite word from a link you followed, held briefly until you have signed in;
a record of achievements you have already been shown, so the same badge is not announced twice.

These are strictly necessary, so no consent banner is required for them. Signing out and clearing your browser data removes them. Note that the map itself is provided by Google, which may set its own cookies as described in section 4.

9. How long we keep it

Account, ratings, photos and progress — kept while your account is open, so your group's map stays intact.
After you ask us to delete your account — removed from our live systems within 30 days, and from backups within a further 30 days.
Server logs — kept by our providers for a short period, typically no more than 90 days.

One thing to be clear about: pubs you added stay on your group's map after your account is deleted, but they are no longer linked to you, and your name, ratings, notes and photos are gone.

10. Your rights

You have the right to:

Access a copy of the personal data we hold about you.
Correct anything inaccurate. You can edit your own ratings and notes in the app directly.
Delete your account and personal data.
Receive your data in a portable, machine-readable format.
Object to or restrict processing we carry out under legitimate interests.
Withdraw consent for location at any time, through your browser settings, without affecting anything we did beforehand.

To exercise any of these, email [CONTACT EMAIL]. We will respond within one month. There is no charge.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

11. Security

All traffic is encrypted in transit. Access to your data is enforced at the database level, so a signed-in user can only ever read data belonging to groups they are a member of, and can only edit their own ratings. Photos are held in private storage and served through expiring links. No system is perfectly secure, but if a breach affects your rights we will tell you and the ICO as required by law.

12. Children

PlotMyPub is about pubs and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete it.

13. Changes to this policy

If we change how we use your data we will update this page and change the date at the top. For significant changes we will let you know in the app before they take effect.