Privacy
What happens to your data?
Reports are anonymous, we never store your IP address, and a moderator checks everything before it appears.
0
names, emails or IP addresses stored from people who send a report
1
cookie for visitors, and it only remembers your theme
90 days
until a report's exact pin and original note are deleted
The short version
What we keep, and for how long
Sending a report needs no account, name or email, and the site never stores your IP address. Photos lose their metadata before they're saved, and the public only ever sees the point on the road, never your pin. After 90 days your exact pin and original note are deleted.
When you send a report
What you send
What you saw, a pin on the map and when you saw it. Up to 3 photos and a note are optional. There's no account, and we don't ask for a name, email or phone number.
Your IP address
We never store it. The site turns it into a one-way code with a secret key that changes every day, and uses the code to limit how often one connection can send and to spot floods of spam. The code is kept with your report until its private details are deleted, in rate-limit counters for 2 days, and in our internal audit log, which records each report sent.
Your location
Your exact pin stays private. Public pages show only the point on the road nearest your pin, and after 90 days we replace the exact pin with that road point.
Photos
The file you upload is never stored. Each photo is re-encoded as a new image, which removes all of its metadata, including any location. Before that, we read when it was taken and, if it carried GPS, how far that spot was from your pin, rounded to 50 m. The coordinates themselves are thrown away.
What moderators see
Your report, your exact pin and the re-encoded photos. A moderator chooses which photos to publish and blurs any faces, licence plates and house numbers first. Only that blurred copy is ever shown to the public.
What becomes public
Only what a moderator approves: what you saw, when, the road, your note as the moderator edited it, and any photos they published. A report that isn't approved never appears.
How long we keep it
90 days after you send a report, we delete your original note and the spam-check code from it, and replace your exact pin with the road point. Approved reports stay in the public record unless they're taken down. Unpublished photo copies stay visible to moderators only; ask us if you want yours deleted.
When you visit
Cookies
The site sets one cookie, ymm_theme, and only when you switch between the night and daylight themes. People who sign in to moderate or edit also get a sign-in cookie. There are no advertising or tracking cookies.
No tracking
There are no analytics, ads or third-party trackers on this site. Street searches aren't stored or logged.
Cloudflare
In production the site sits behind Cloudflare, which handles every request on its way to us, including your IP address, under Cloudflare's own privacy policy.
The anti-spam check
When it's switched on, the report form also runs Cloudflare Turnstile, a check that stops bots, under Cloudflare's privacy policy.
Corrections and takedowns
The corrections form
It asks for no name, and it uses the same daily spam-check code as reports. If you add an email so we can reply, we delete it 90 days after we close your request.
Taking something down
Send a request through the corrections form. A moderator can take a published report off the site, and its published photos are deleted with it.
Questions about your data? Ask through the corrections form. A person reads every request.