Privacy policy

imagemap.app is a free tool for making images clickable. You use it without an account. Your image and your work stay on your computer. This page explains what data is still processed, why, and what your rights are.

Who is responsible

Chris K. N. Consulting AS is the data controller. Next Page Labs is a brand the company uses for its own products, including imagemap.app.

Your image and your project

The image you open is never uploaded. The editor runs in your browser, and no server of ours receives the image, the areas or anything you type.

Your browser saves your work locally, so you can close the tab and pick up where you left off:

• IndexedDB (the imagemap database): the image and the project, meaning the areas, links and text.
• localStorage: your language choice, a few display settings, such as whether the side panel is open, and when you last chose Leave a tip.
• sessionStorage: that the tip prompt has been shown in this tab, so it doesn't come back.

This data exists only in this browser on this computer. We cannot see it, and another browser or computer cannot either. The editor asks your browser to keep the data so it isn't removed automatically when space runs low. Some browsers ask you first.

How to delete it: Choose Close project under More options in the editor, then Close and delete. This deletes the image and the project. If you clear the site data for imagemap.app in your browser settings, your settings are removed as well. To keep a copy of your work, export the JSON first.

Loading an image from an address

When you load an image from a web address, your browser fetches it directly from that site. The image does not pass through us. The site that hosts the image sees the request as it would any other: your IP address, your browser, and that the request came from imagemap.app. The editor sends no cookies and no referrer with the request. The same applies when you paste HTML with an image address, and when the export preview shows an image from an address you entered. That site has its own privacy policy.

Visitor statistics with Pirsch

We count visits with Pirsch, a German analytics service that uses no cookies. We do this to see how many people use the editor, where they come from and which features they use, so we know what to improve.

When you open the page, your browser sends a request to Pirsch. Pirsch records:

• the page you visit (the path only, such as /no/) and the page you came from
• the time
• your browser language, browser, operating system, and whether you use a phone or a computer
• country and city, looked up from your IP address
• your screen size
• campaign codes (UTM), if the link you followed had them

We also count a few actions: that you import or export (and which format), that you use the magic wand or Find all, and that the tip prompt is shown and whether you choose the button. These events contain only fixed values. They never include file names, images, addresses, amounts or anything you type.

Your IP address is not stored. Pirsch creates a one-off number from your IP address, browser, the date and a secret value for the site, and uses it to count unique visits on the same day. The number cannot be turned back into your IP address. It changes every day and cannot be linked across websites. We therefore cannot see who you are, and we cannot follow you over time.

Pirsch processes the data on our behalf and stores it on servers in Germany at Hetzner.

Cloudflare

The site is hosted by Cloudflare (Cloudflare Pages). Cloudflare serves the pages from the data center nearest to you and protects the site from attacks and abuse. To do this, Cloudflare processes technical data about each request, including IP address, browser, time and which file was requested. Cloudflare processes this data on our behalf. We see aggregate figures for the traffic, and we do not use the data to find out who you are.

If your browser has trouble reaching the site, it may send a short error report to Cloudflare (Network Error Logging). Cloudflare uses the IP address only while processing the report and does not store it.

Tips

After you download or copy the code, you can leave a tip with the Leave a tip button. The button is a plain link that opens Stripe in a new tab, on Stripe's own domain. The editor loads nothing from Stripe, and we receive no payment details from the editor.

The payment takes place at Stripe, and Stripe is the controller for it. The receipt and the payment are processed by Stripe and by us as the recipient. Read more in Stripe's privacy policy.

Cookies

imagemap.app uses no cookies. The local storage described above is used only to remember your work and your settings. It is part of the tool you asked to use, and it is not used for tracking.

If Cloudflare detects signs of an attack or automated traffic, it may set a cookie that exists only for security, for example after checking that you are human. The Stripe page that opens when you want to leave a tip has its own cookie rules.

Legal basis

• Statistics and security: legitimate interests, Article 6(1)(f) GDPR. We have a legitimate interest in knowing how the editor is used and in keeping the site secure and available. We chose services that do not store IP addresses and do not recognize you from one day to the next, to keep the impact on your privacy small.
• Local storage: Data in your browser is not processed by us. Storing it is necessary for the editor to remember your work, so it does not require consent.
• Tips: We process the data we receive as the recipient of a payment to meet our bookkeeping obligations, Article 6(1)(c) GDPR.
• Email to us: legitimate interests in replying to you.

How long we keep data

• Your image and project: in your browser until you delete them. We never have them.
• Pirsch: IP addresses are not stored. The one-off number is only valid for the same day. Pirsch keeps browser information (User-Agent) separately from visits for up to three months. We keep the aggregate statistics for as long as we use Pirsch, and we delete the data there when we stop.
• Cloudflare: Cloudflare keeps technical data for as long as needed for operations and security, under its own rules.
• Tips: the payment details for as long as the Norwegian Bookkeeping Act requires.
• Email to us: up to 24 months after our last exchange.

Transfers outside the EEA

Pirsch stores data in Germany, inside the EEA. Cloudflare, Inc. is a US company, and data may be processed in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework. Cloudflare states that the EU Standard Contractual Clauses apply if that certification lapses.

Your rights

Under the GDPR and the Norwegian Personal Data Act, you have the right to

• know what data we hold about you, and get a copy
• have errors corrected
• have data deleted
• have processing restricted
• object to processing based on legitimate interests
• take your data with you (data portability)

Because we do not store IP addresses or anything else that points to you, we usually cannot find data about you specifically in the statistics. Only you have your image and project. Write to us and we will reply within 30 days.

Complaints

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority (Datatilsynet): datatilsynet.no, Postboks 458 Sentrum, 0105 Oslo, Norway. We would appreciate hearing from you first, so we can try to put it right.

Contact

Send privacy questions to support@nextpage.no. Put imagemap.app in the subject line.

Changes

If we change how data is processed, we update this page and the date at the top. If we start using new services that process data about you, such as ads, they will be described here before they go live.