Privacy policy
This policy describes how wherebird handles information when you visit the site, sign in, use the map, or send feedback.
Google sign-in
When you choose to sign in with Google, wherebird requests OpenID, email, and basic profile access. Google returns an identity token. wherebird verifies it and uses your stable Google account ID and verified email address to authenticate you. The app does not use your Google name or profile photo or request access to Gmail, contacts, or Drive.
wherebird uses short-lived cookies to secure the sign-in exchange and stores your Google account ID and verified email in a signed, HTTP-only session cookie that lasts up to 30 days. Signing out clears the session cookie. wherebird does not store Google access or refresh tokens for continued access. If you submit feedback while signed in, wherebird stores your account ID and email with the feedback. Product analytics uses an account identifier derived from your Google account ID and sends that identifier to PostHog for product analytics. PostHog does not receive your email or raw Google account ID as product event properties. Render processes sign-in and feedback data as our hosting and database provider. wherebird does not use Google sign-in data for advertising or send it to map and routing providers.
Map searches and saved places
wherebird processes the search text, destinations, coordinates, and travel settings needed to show results. Mapbox provides address search, basemaps, and some routing. TravelTime and, where configured, Stadia Maps calculate some travel areas or routes. These providers receive the search text, coordinates, or routing settings their features need. Your browser connects directly to Mapbox to load maps, which exposes ordinary connection information such as your IP address to Mapbox.
wherebird stores saved places, markers, selected destinations, map preferences, and some recent results in your browser. This data can remain there after sign-out and does not sync across browsers. wherebird also caches some routing results to avoid repeating provider requests.
Feedback, hosting, and security
If you send feedback, wherebird stores your rating, any comment you include, the page and submission time, and technical context such as browser viewport size, app version, and analytics identifiers when available. Signed-out visitors can choose to add a reply email after submitting. wherebird uses feedback to investigate issues, improve the service, and reply when appropriate. Render hosts the site and the PostgreSQL database that holds feedback. Hosting and security systems process request information, such as IP addresses, to deliver the site and limit abuse.
Product analytics
wherebird uses PostHog to understand how people find and use the site. Analytics records selected events such as visits, sign-in completion, searches, and errors, along with information such as browser and device type, referring domain, and campaign tags. Analytics uses cookies and browser storage for identifiers and attribution, and can link activity before and after sign-in. Product events exclude raw addresses, coordinates, saved place labels, and feedback text.
Session replay is available only for explicitly allowlisted signed-in accounts. In those sessions, input fields are masked and the feedback form and map canvas are excluded from recordings. Other visible page content may appear. wherebird honors browser Do Not Track for ordinary visitors. The service supports a separate, explicit account-level exception for allowlisted sessions.
Retention and your choices
You can remove saved places in the app or clear this site’s browser data to remove locally stored settings, cookies, and saved places. You can also remove wherebird’s access in your Google Account connections. Feedback and analytics are stored separately from your browser data and may be kept after sign-out for support, product improvement, and operational analysis.
Contact support@wherebird.com with privacy questions or to request access to or deletion of information wherebird holds about you.