Privacy policy

Refugia is a company registered in Israel, 165 Allenby Street, Tel Aviv, Israel, is responsible for your personal data (the “controller”). Questions and requests: hello@gorefugia.com.

• Your account: your email address, a scrambled form of your password (we cannot read it), your time zone (for the morning digest) and your email choices.
• Your reports and watched places: the points you assess, any name you give them, the reports, and the alerts for places you watch.
• Purchases: what you bought, when, and Paddle’s customer and subscription references. Paddle collects your card or payment details and billing address; we never see your card number.
• How the site is used (only if you accept analytics cookies, or without cookies if you decline): pages visited, clicks and a recording of the screen with every typed field hidden, your browser and an approximate location from your IP address.
• Ad measurement (see Cookies): whether a visit came from one of our ads and whether it led to a sign-up or purchase.
• Technical logs: IP addresses and request details our servers record to run and protect the service.

• To run your account and make, store and email your reports, alerts and receipts (to perform our contract with you).
• To take payments, keep accounting records and handle refunds (contract, and legal obligations such as tax law).
• To keep the service secure and prevent abuse, such as many accounts claiming free credits (our legitimate interest).
• To understand how the site is used and to measure our ads (your consent, where the law requires it; you can withdraw it at any time).
• To send service emails. We do not send marketing email without asking you first.

We do not sell your personal data, and we do not use your places or reports to target you with ads.

The exact points you assess are visible only to your account. The public map shows only a general summary of an area of about five square kilometres, never a point or who looked at it. Exact coordinates are removed from the addresses sent to our analytics and ad tools. To build a report, the coordinates (without your name or email) are sent to the data and research services listed below.

• Paddle.com (United Kingdom): payments, as Merchant of Record under its own privacy policy.
• Railway (servers and database, European Union) and Vercel (website delivery, worldwide).
• Resend (email delivery, European Union).
• PostHog (product analytics, European Union), only with your consent or in cookieless form.
• Meta Platforms (ad measurement), only where allowed by your choice in the cookie banner.
• Anthropic (United States): the AI research and writing of reports, which receives the point and its place names, not your identity.
• Map, place-search and data services (for example OpenStreetMap, Photon by komoot, EOX, Open-Meteo, USGS and NASA): they receive coordinates or search text and your IP address when your browser loads map tiles.

Some of these are outside your country, including in the United States. Where the law requires it, transfers are covered by safeguards such as the European Commission’s standard contractual clauses.

• Needed for the site: your sign-in (kept in your browser’s storage), view preferences, and a cookie with your country (30 days) that decides whether we must ask before measuring ads.
• Analytics (PostHog): only after you accept. If you decline, visits are counted without cookies.
• Ad measurement (Meta Pixel): in the United Kingdom, the European Economic Area and Switzerland only after you accept; elsewhere unless you decline.
• Checkout: Paddle sets its own cookies while you pay.

Change your choice at any time: Cookie settings

• Your account, reports and watched places: until you delete them or ask us to close your account.
• Purchase records: as long as tax and accounting law requires (usually seven years), even after an account is closed.
• Analytics data: up to 12 months. Server logs and email delivery logs: a limited period set by those providers, usually under 90 days.

You can ask to see the personal data we hold about you, to correct it, to receive a copy, to have it deleted, or to object to or limit how we use it; and you can withdraw consent at any time. Write to hello@gorefugia.com from your account’s email and we answer within 30 days. Email choices can also be changed on your dashboard or with the link in each email.

If you are unhappy with our answer, you can complain to the Privacy Protection Authority in Israel or to the data protection authority where you live.

Connections are encrypted, passwords are stored only in a scrambled form, links in emails are signed so they cannot be forged, and access to the servers is limited. No service is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Refugia is for adults. We do not knowingly collect data from anyone under 16; if you think a child has given us their data, tell us and we will delete it.

We will update this page when what we collect or who processes it changes, and tell you by email about changes that matter.

hello@gorefugia.com. Refugia is a company registered in Israel, 165 Allenby Street, Tel Aviv, Israel.