Privacy policy

What we collect

We store the account details you provide, including your email address, handle and optional display name. We store the lists, descriptions, notes, follows and preferences you create. Passwords are stored only as salted hashes. API keys and OAuth tokens are stored only as one-way hashes.

Places and maps

When you search for or add a place, we send the search terms and relevant location context to Google Maps Platform. Place details, ratings and photos come from Google and may be cached briefly so a list can render. Google's own terms and privacy policy apply to that processing.

ChatGPT and other connected clients

If you connect ChatGPT, OpenAI sends requests and an OAuth access token to Favourite Place. We use that token only to identify your account and carry out the list actions you request. Tool responses can include your list content, notes and public profile information. We do not send your password or raw Favourite Place credentials to OpenAI.

How we use and share data

• To provide, secure, troubleshoot and improve Favourite Place.
• To show the lists you publish, and to hide any list removed by moderation.
• To process place searches through Google Maps Platform and infrastructure through our hosting and database providers.
• To meet legal obligations and address abuse.

We do not sell personal information.

Retention and control

Account and list data remains until you delete it or ask us to delete your account, except where limited records must be retained for security or legal reasons. Short-lived authorization codes expire after five minutes; OAuth access tokens after one hour; and refresh tokens after thirty days. You can disconnect ChatGPT in Settings.

Your choices

You may request access, correction, export or deletion of your personal information. Contact support@favourite.place. We may need to verify that the request concerns your account.

Contact

Questions about this policy or Favourite Place's data handling can be sent to support@favourite.place.