Privacy Policy
This policy explains what Edge Passport processes, why, and your rights. The controller is Edge Passport.
1. What we process
- Request metadata, provided automatically by our host (Cloudflare) when you load a page: your approximate city, country and continent, your time zone, your IP-derived network operator and ASN, and your connection's round-trip latency.
- Anonymous counters, stored in Cloudflare KV: a global stamp count, a per-edge-city count, a short ring buffer of the most recent stamps (edge-city code and time only, shown in the live ticker), and cumulative "score buckets" used to compute an anonymous percentile. These are aggregate numbers with no user identifier.
- Local storage in your own browser: your collected cities, daily streak and first-discoverer flag. This stays on your device.
We do not use cookies, accounts, passwords, advertising identifiers or cross-site trackers, and we do not sell personal data.
2. Purposes and legal bases
- Show your passport and compute distance/latency — performance of the service you requested.
- Aggregate counters and anonymous ranking — legitimate interest in operating and improving the Service.
- Keep the Service secure and prevent abuse — legitimate interest.
3. Recipients and third parties
- Cloudflare hosts the Service (Workers, KV) and processes request metadata as our hosting provider.
- Google Fonts is loaded from Google's servers to render text; Google may receive your IP address. See Google's privacy policy.
- Google Maps links open only when you click them; navigation happens on Google's site under Google's terms.
4. Retention
Aggregate counters are kept indefinitely because they contain no personal data. Request metadata is used to render your response and is not stored by us in identifiable form. Local storage remains until you clear it in your browser or press "Clear my collection".
5. International transfers
Cloudflare operates a global network; processing may occur in datacenters worldwide. Transfers rely on Cloudflare's applicable safeguards.
6. Your rights
Under the GDPR and similar laws you may request access, rectification, erasure, restriction, portability, or object to processing, and lodge a complaint with your supervisory authority. Because we hold no account or identifier for you, we may not be able to locate "your" data; you can always erase local data yourself with "Clear my collection".
7. Children
The Service is not directed at children below the age of digital consent in your country.
8. Changes
We may update this policy; the "last updated" date will change accordingly.