Privacy

The permits you hold, the state you live in, your age and whether you are military or a veteran are saved in your own browser, in localStorage. They never leave your device except as described below, and clearing your browser data deletes them. We cannot read them, and we have no copy to hand to anyone.

Checking a point sends that point and your profile to our server so the rules can be applied to it. The request is answered and discarded. It is not written to a database, not attached to any identifier, and not logged: no route in this application records a request body.

Searching an address sends what you typed to our server, which relays it to OpenStreetMap’s Nominatim service. It is relayed rather than called from your browser on purpose, so that your address search reaches them from us and not from your IP address.

Pressing my location asks your browser for your position. Your browser will ask your permission first, the coordinates are used for that one lookup, and nothing about them is retained.

The map itself is drawn from two services your browser contacts directly, which means they can see your IP address and roughly which part of the country you are looking at, in the same way any map on the web works:

• OpenFreeMapthe background map tiles
• Cloudflare R2the restriction geometry archive
• Cloudflareserves this site, and sees requests to it as any host would
• Neonthe database the rules are stored in, reached only by our server

None of them are sent your permits, your age or your address searches. There is no tracking pixel, tag manager or third-party script on this site at all.

A checked point puts its coordinates in the address bar so the answer can be bookmarked or sent to someone. Your profile is deliberately not in that link. Anyone who opens it gets the answer for their own permits, not yours. The site also tells your browser to send only its origin, never the full address, when you follow a citation out to a statute, so the coordinate does not travel with you.

This site is not directed at children and collects nothing from anyone, so there is nothing held about a child to request or delete.

If this ever stops being true, this page changes before the code does.