CamehereContact / report a concernPrivacy Notice
This notice describes the Camehere website at camehere.netlify.app and its operator's current handling of information. Contact the operator through the contact and reporting form. Personal location and intimacy-related records can be sensitive. Limit what you record, obtain other people's permission when needed, and avoid identifying them unnecessarily.
1. Information and where it goes
- Private memories: pin names, coordinates, counts, people headcounts, optional dates, notes, resized photos, colors, and favorites are saved in this browser. They are not uploaded to our leaderboard database. Choosing Puter sync sends a separate copy to your Puter account. Deletion markers contain pin identifiers and times to help prevent old copies from restoring deleted pins.
- Location and search: clicking “Pin where I am” asks the browser for your position with permission. We do not implement continuous location tracking. Address searches send the search phrase to Photon. Esri receives map tile requests that reveal the map areas being viewed; providers can also receive IP addresses and ordinary request information.
- Optional public entry: after a separate confirmation, Netlify stores and serves your nickname, total CLIMAX count, pin total, update time, and an account-derived public identifier. A cryptographic hash of the Puter account identifier ties that entry to its owner. People counts, exact locations, pin names, notes, and photos are excluded from the public entry.
- Sign-in: Puter manages authentication. For server-verified actions, your Puter access token is transmitted over HTTPS to a Camehere function, which verifies it with Puter. Our acceptance and leaderboard records do not intentionally store that token or your Puter email address.
- Agreement records: this browser stores accepted document versions, a local acceptance time, and your adult-eligibility declaration. After sign-in, we also retain a server-timestamped version record linked to a hashed account identifier. This records a declaration, not verified age.
- Contact requests: Netlify Forms stores the name you optionally provide, reply email, selected request category, message, and submission information. Hosting and anti-spam systems may process IP addresses and technical request information.
- Technical delivery: Netlify and external font, code, authentication, map, and search providers receive information needed to serve requests, such as IP address, browser information, URL, and timing. Some page-delivery and font/style requests occur before you accept the Terms.
2. Why information is processed
We use information to operate the features you request, save and restore memories, authenticate public-entry changes, publish entries you choose to share, record agreements, respond to requests, prevent abuse, maintain security, and comply with legal obligations. Where data-protection law requires a legal basis, applicable bases depend on the processing and may include providing a requested service, your specific consent where required, legitimate operational or security interests where permitted, and legal obligations. Accepting Terms is not blanket consent to unrelated processing.
3. Sharing and third-party services
Private journal data is not intentionally published by Camehere. Your public leaderboard entry is available to anyone, can be copied, and may be indexed. Nicknames and account-derived identifiers are not a guarantee of anonymity. We do not implement advertising trackers or sell journal records in the current application. Providers may process technical information under their own policies. We may disclose information where legally required, to protect rights or safety, or to appropriate service providers for the purposes described here, subject to applicable law.
Relevant providers include Netlify, Puter, Esri, Photon/OpenStreetMap, Google Fonts, and unpkg. Their systems may operate in countries different from yours. Their own privacy notices describe their practices; we cannot promise that third parties make no logs or retain no data.
4. Browser storage and security limits
Browser storage holds your memories, settings, and agreement records; Puter's software may separately keep sign-in state. The optional device lock uses a passphrase-derived key to encrypt the saved journal copy in this browser. The key is used in memory while unlocked. Backups exported while locked-data protection is enabled are encrypted. Backups exported without it are readable JSON. Neither device encryption nor our code provides end-to-end encryption for the separate Puter copy. We cannot reset an unknown encryption passphrase.
Encryption does not protect an unlocked session, a compromised device, malicious browser extensions, or all risks from third-party scripts. Keep independent backups and protect them. Resizing a photo does not remove personal information visible in the image. No system is perfectly secure.
5. Retention and deletion
Browser memories remain until you delete them or browser data is cleared. Separate Puter copies and exports remain under their own controls and lifecycles; clearing this browser does not delete them. A failed sync or old device can leave an earlier copy. Removing a public entry deletes the active leaderboard record when the request succeeds, but cannot delete copies made by others. Provider backups, operational logs, and legally required records may remain.
Agreement records and contact requests may be retained as reasonably needed to document agreements, handle requests, maintain security, or meet legal requirements, including applicable dispute periods. We do not promise immediate erasure of records subject to a valid retention obligation. Use the contact form to ask about retained information or request deletion, including deletion of agreement records where applicable.
6. Your choices and requests
You can decline the Terms and not use the app; read these pages and submit a request without accepting; decline location permission; avoid Puter sync; choose not to join the leaderboard; remove your entry; edit or delete pins; and export backups. Clearing browser storage removes its device copy but may make encrypted memories unrecoverable. Manage separate cloud copies through your Puter account and provider controls, or seek assistance.
Depending on applicable law, you may have rights to access, correct, delete, export, restrict, or object to certain processing, withdraw consent, or complain to a regulator. Use the contact form to exercise applicable rights. We may need to verify that a request concerns your data. Access and deletion requests are not conditioned on acceptance of new terms. For data held only on your device or in your independent provider account, we may direct you to the controls or provider that can fulfill your request. Declining new terms does not automatically erase prior public entries or account records.
7. Adults only
The Service is intended only for adults at least 18 years old. Do not enter information about minors' intimate activities or submit images involving minors in sexual contexts. If you believe a child is using the Service or information about a child has been submitted improperly, report it through the contact form. We will address applicable deletion and protection requirements. The age declaration alone does not establish legal compliance in every jurisdiction.
Friends and notifications
When you create a friends profile, Netlify stores your chosen nickname, a random friend code, an account-derived identifier, and your sharing and notification settings. Connection records store requests, acceptance, removal, blocking, and times. People exchanging a request can see each other’s chosen nickname. Your friends list and code are not published on the public leaderboard.
If you enable activity sharing, saving a new pin while friends is connected sends only a random activity identifier and server time to Netlify. No coordinates, pin names, dates of the underlying memory, counts, people, notes, or photos accompany the activity. Current mutual friends with notifications enabled can see your nickname and activity time. Activities from before a friendship are excluded. Turning sharing off prevents activity access while it remains off. Removing or blocking a friend revokes that relationship’s access, but cannot erase screenshots or information already seen.
The app checks for updates about every 30 seconds while open, connected, and unlocked. There are no phone push or email notifications. The inbox shows up to 100 activities from the last 30 days; stored activity is pruned to the newest 100 and removes records older than 30 days when you next share a pin. Dormant account activity may remain stored longer, but is excluded from the inbox after 30 days. Read status is stored in this browser separately for each friends account. Profile, connection, and blocking records remain to operate these controls; request deletion through the contact form. Provider backups and lawful retention may persist. Device lock pauses friends and clears its on-screen data, but does not encrypt the separate server-side friends records.
8. Updates
Changes will be dated and versioned. Material changes will be brought to users' attention with renewed acknowledgment, and separate consent will be requested where required. Contact us about questions concerning this notice or the application's actual behavior.
Optional purchases and Plus access
Stripe handles payment details on its hosted checkout page when purchases are enabled. Camehere sends Stripe the selected product, price, and a hashed Puter account identifier to associate the purchase with your account. Private pin locations, photos, notes, people counts, and journal totals are not sent to Stripe by our billing integration. Stripe may collect contact, payment, billing, device, and fraud-prevention information under its own privacy notice.
Camehere stores Stripe session and payment identifiers linked to the hashed account identifier and a verification time. We use them to unlock and restore Plus and check refunds, payment reversals, and disputes. Billing records may remain as reasonably necessary to provide access, handle disputes, and meet applicable recordkeeping obligations. We do not store your full card details. Your chosen Plus theme is saved in this browser by account; advanced statistics are calculated from your local journal. Existing rights and contact options in this notice also apply to purchase-related requests.