Mural Hunter keeps as little about you as it can: an email address to sign in with, and the murals you choose to post. Nothing public says who posted a mural, or when.
This policy covers the Mural Hunter website and the Mural Hunter app for iPhone and Android. By using the website, or by signing in to the app, you accept it.
Who Runs It
Mural Hunter is run by Daniel Nordby, an individual in Florida, USA, who decides what is kept about you and is responsible for it (the “controller”, in the words of the EU’s data protection rules). Write to hello@muralhunter.site about anything on this page.
What Is Kept
Your account: your email address, when you signed in, and, if it comes to that, whether your account is suspended and how many of your murals have been reported. There is no password, name or profile.
Signing in with Apple: on the website, or in the app on an iPhone, you can sign in with Apple instead of an emailed code. Your email address is then the one Apple shares: your own, or, if you choose to hide it, an address at Apple that forwards to yours. Mural Hunter also keeps the code Apple uses for you, the same on the website and in the app, so you can sign in again, and asks Apple for nothing else, not even your name. When you delete your account, Apple is asked to confirm it is you once more, and then told to stop signing you in to Mural Hunter.
Your murals: the photo and a smaller copy of it, the pin you placed, the date it was taken (never the time), and the name, artist and labels you gave it. From those, Mural Hunter works out the nearest town, the photo’s main colours, and a description of how it looks, used to suggest labels and never shown. Which account posted a mural, and when, are kept so you can find and change your own, and so the rules can be kept. They are never shown to anyone else.
Hidden details in photos — where and when a photo was taken, the phone that took it — are removed before it is published: once in your browser, and again on the server.
Reports: the reason and when. Nothing about who reported.
Removed accounts: when an account is removed for breaking the Terms of Use, a scrambled code made from its email address is kept, so it can’t sign up again. The address can’t be read back from it.
A record that outlasts the account: if an account was ever suspended, then when it is deleted a scrambled code made from its email address is kept, with how many times it was suspended and how many reports its murals had, and nothing else. Signing up again with the same address brings that record back, and an account that was suspended when it was deleted comes back suspended. Deleting an account and starting over doesn’t wipe the slate clean. This protects the community: abuse of the Terms or of other people’s privacy doesn’t reset. The record is deleted 3 years after it last changed. An account that was never suspended leaves no code behind.
Hidden posters: when you hide someone’s murals, Mural Hunter keeps a record of it: a scrambled code made from your email address, and one made from theirs. That record keeps their murals out of your sight, even if they delete their account and come back. Only what you see changes. Neither of you is told, and you are never told who they are. When you delete your account, your record of everyone you have hidden is deleted with it.
There is one exception. The scrambled codes are made with a secret key that Mural Hunter stores. If that key is ever missing when you delete your account, for example after a mistake on Mural Hunter’s side, your account is still deleted, but your record of hidden posters can’t be matched to you, so it stays behind, still scrambled. If you later sign up again with the same email address, those posters’ murals are hidden from you again.
These scrambled codes are used only for moderation and to keep hidden posters hidden, never for anything else. They are never stored beside a name, a mural, a location or anything else about you, and the address can’t be read back from them.
What Is Not
Mural Hunter sets no cookies and shows no ads. Your data is not sold or shared for marketing. On the website, signing in keeps you signed in through your browser’s own storage; in the app, through your phone’s secure storage, on that phone only. Signing out clears it. The same storage remembers which of your badges it has already shown you, so each new one appears once; it is never sent anywhere. The app has no advertising, analytics or tracking code in it.
If you let the site or the app use your location, it is used on your device to centre the map, start your pin and sort murals nearest first. It is never sent to Mural Hunter or kept. Only the pin you place on a mural is.
Who Handles It
Mural Hunter uses these services to run. Each handles only what it needs for its part:
- Supabase keeps the database, the photos and your sign-in, on servers in Virginia, USA.
- Netlify hosts the site. Like any web host, its servers see each visit and keep short logs.
- Resend sends the email with your sign-in code, from the EU.
- Cloudflare checks that a person, not a program, is signing in or reporting a mural (Turnstile), and counts visits without cookies and without identifying you (Web Analytics).
- Voyage AI receives a small copy of a photo when you choose it to add, to describe how it looks and suggest labels. It receives nothing about you.
- OpenStreetMap draws the map on the website. Your browser loads the map’s pictures from its servers, which see your address on the internet, as any website does.
- OpenFreeMap draws the map in the app, and the map of your Travels on the website. Each loads the map’s pictures from its servers, which see your address on the internet and the part of the map you are looking at, as any online map does. Your location itself is not sent, and nor are your murals.
- Apple and Google deliver the app and its updates through the App Store and Google Play, under their own privacy policies. They may show Mural Hunter totals, such as how many times the app was downloaded, but never who you are. On an iPhone, before the app signs you in or reports a mural, Apple vouches that it is the real Mural Hunter app (App Attest). Mural Hunter keeps the key that makes this possible, one for each installation, tied to no account and nothing about you. If you sign in with Apple, on the website or in the app, Apple confirms who you are and passes Mural Hunter your email address, or the address that hides it.
Where It Is Kept
Mural Hunter is run from the United States, and what it keeps is kept there. Netlify, Cloudflare and Voyage AI are US companies too; only the sign-in email is sent from the EU. If you live outside the US, using Mural Hunter means your data goes to the US, whose data protection laws differ from yours. The rights on this page are yours wherever you live.
Why It Is Kept
Your email and your murals are kept because you asked for an account and posted them: without them the site can’t do what you signed up for. The checks against abuse, reports, removed accounts, records that outlast an account, hidden posters and visit counts are kept because the site has a legitimate need to stay safe and to know whether it is used. That is the basis the EU data protection rules (GDPR) ask for.
How Long
Your murals stay until you or an admin delete them, or your account goes, and their reports go with them. Your account stays until you ask for it to be erased or it is removed. Once it is gone, Mural Hunter keeps no copy of your email address, only the scrambled codes above, and only when there is a reason for one. A record’s code is deleted 3 years after the record last changed; a hide’s stays as long as the hide. Backups and logs kept by the services above expire on their own a short while after.
Your Rights
You can see your murals in your Journal, on the website or in the app, and change or delete any of them from its page on the website. To delete your account with all your murals and their photos, use Delete My Account in your Settings on the website, or Delete Account in the app’s Settings. To get a copy of everything kept about you, to have it corrected, or to have your account erased if you can’t use either, write to hello@muralhunter.site from your account’s email address. Erasure leaves no copy of your email address. Only the scrambled codes described above can stay: a record, for 3 years, if your account was ever suspended, and other people’s hides of your murals.
If you are unhappy with how your data is handled, you can also complain to the data protection authority where you live.
Children
Mural Hunter is not for children. You must be 16 or older to have an account. If you know of an account belonging to someone younger, write to hello@muralhunter.site and it will be erased.
Changes
This page will change when what is kept does. The date at the top says when it last did.