The Cartographer tool
Cartographer runs entirely on your machine. Maps, configuration and replays are stored in a folder called ~/.cartographer in your home directory. The local dashboard binds to 127.0.0.1 and refuses requests from any other address, so it is not reachable from your network. The tool contains no analytics, no crash reporting and no telemetry of any kind.
The only network call the tool ever makes is the installer downloading Cartographer itself from this site. After that, nothing it reads and nothing it writes leaves your computer. Your session transcripts, the maps built from them, your profile and your declared goals stay with you. We cannot see them, and we have no way to ask for them.
Before a map is filed, the save command redacts secrets it recognises, such as keys and tokens that appear in a transcript. This is a courtesy for the day you choose to share a map with someone, not a substitute for your own review: the redaction is pattern based and can miss things.
The website
codecartographer.dev is a static site served by Cloudflare. The pages themselves set no cookies and carry no analytics script of their own. We do not run a newsletter, there are no accounts, and there is no form that stores what you type.
Like any web host, Cloudflare processes the technical details of each request, such as your IP address and browser type, to deliver the page and to protect the site from abuse. That processing is governed by Cloudflare's privacy policy.
Third parties the pages load
When a page loads it asks the following services for a file, which means each of them receives the technical details of that request, including your IP address. Browser extensions that block third party requests will stop all of them, and the site still works without any of them.
- Google AdSense. The pages carry Google's advertising script. Google, as a third party vendor, uses cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and other sites on the Internet. You can opt out of personalised advertising at Google's ads settings. How Google uses data when you use a site that carries its services is explained at policies.google.com/technologies/partner-sites.
- Ko-fi. The floating support button is a script loaded from storage.ko-fi.com. Nothing happens unless you click it; if you do, you are dealing with Ko-fi under Ko-fi's own terms and privacy policy.
- PeerPush. The badge in the footer is an image loaded from peerpush.com.
The demo replay on this site is Cartographer's own map of the sessions that built Cartographer, with secrets redacted. It is a file in the public repository, not a live view of anything.
Mail sent to support@codecartographer.dev or mapit@codecartographer.dev is received by Cloudflare Email Routing, tagged by the mailbox it was addressed to, and forwarded to an inbox read by a person at Situated Strategies. We keep your message for as long as it takes to deal with it and for our own records of what was reported. We do not add your address to any list and we do not share it. If you send us a map, we treat it as private unless you tell us otherwise in the same message.
Your choices and your rights
You can read this site with third party requests blocked and lose nothing. You can delete everything the tool has ever stored by removing the ~/.cartographer folder. If you have written to us and want your message deleted, say so at support@codecartographer.dev and we will delete it. Residents of jurisdictions with data protection laws, including the European Union, the United Kingdom and California, have rights of access, correction and deletion over any personal data we hold, which in practice is limited to the email you chose to send us.
This site is not directed at children under the age of 13, and we do not knowingly collect personal information from them.
Changes
If this policy changes, the new version is published here with a new date. Material changes, such as adding an analytics service, will be called out on this page for at least thirty days.