Privacy Policy
Effective October 15, 2026
GeoPhoto runs on your computer and works on your own files. We designed it to send as little as possible. This policy describes what the app and this website send, to whom, and why. It is made by Hu Feiyu (“we”); contact [email protected].
Your photos
Your photo files, thumbnails and their EXIF data never leave your computer. GeoPhoto has no telemetry, analytics or crash reporting.
What the app sends
| When | Sent to | What |
|---|---|---|
| Checking for updates (automatic once a day, can be turned off in Settings) | GitHub | A request for the release information; no identifiers beyond your IP address and the app version |
| Showing the standard map on Windows | OpenFreeMap, or OpenStreetMap if the vector map cannot start | The map style, the map tiles, and the fonts and icons the visible labels need, which reveals the area you are looking at. |
| Showing the standard map on macOS | Stadia Maps for licensed users, OpenStreetMap otherwise | Which map tiles to load, which reveals the area you are looking at |
| Showing the map with Mapbox, if you add your token | Mapbox | Which map tiles to load, which reveals the area you are looking at |
| Searching for a place | OpenStreetMap Nominatim, or Mapbox if you use it | The text you type and your language. With Mapbox, also the center of the map |
| Planning routes in the Footprint editor | Mapbox (with a token) or BRouter, or a routing server you set | The coordinates of the stops, which come from your photos’ locations |
| The optional AI assistant, if you turn it on with your own key | The provider you choose (for example Anthropic) | Stop names, local times, distances and travel modes. Never coordinates |
| Activating and checking a license | Our license server, and our payment provider | Your license key, a device identifier (a one-way hash of your computer’s Windows ID, not the ID itself) and your computer’s name. Where the payment provider keeps the license record, it receives the key and the device identifier, not the computer name |
Every request carries your IP address and a User-Agent naming GeoPhoto and its version, as any internet request does.
What our license server stores
For each license: the key (used only to update the payment provider’s license record, for example to deactivate your computers after a refund; it is never logged or sent back), a hash of the key and its last 4 characters, the payment provider’s license and order numbers, purchase, refund and status dates. For each activated computer: the device identifier, the computer name you see in Settings, and when it was activated and last checked. We do not store your name or e-mail address. Request limits use a hashed form of your IP address. The server runs on Cloudflare, which keeps its own request logs.
We keep license records for as long as the license exists, and for up to 2 years after a refund so we can handle disputes. You can ask us to delete an activation or your license records at any time; deleting the license records also ends the license.
Purchases
Payments are processed by our payment provider as merchant of record; its name is shown on the checkout page and on your receipt. It collects your name, e-mail address, billing details and payment information under its own privacy policy, linked from the checkout page. We receive the order and license numbers, not your card details; we don’t read the e-mail address from its order notifications.
This website
The website uses Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites. The site sets no cookies. The interactive demo runs entirely in your browser and loads its map and photos from this site.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or object to its use, by writing to [email protected]. We’ll answer within 30 days.
Changes
We’ll post updates on this page with a new effective date.