Privacy

The tools run in your browser. What you draw stays there unless you make an account and save it. This page says what we keep, where it goes, and how to download or delete it.

Effective September 19, 2026. Geo² (www.geosq.com) is operated by ObjectGraph LLC ("we", "us"). Questions: [email protected].

Without an account

  • Your drawing stays in your browser. Shapes, paths, points and circles are drawn and measured on your device. GPX, KML and GeoJSON files you open are read by the page and are not uploaded.
  • Share links from the Radius, Elevation Finder, Coordinate Converter and Plot Points tools carry everything in the link itself. Nothing is stored on our server; whoever has the link sees what is in it.
  • Elevations. To look up an elevation, the page sends the coordinates of your points to our elevation server (elevationapi.geosq.com). If you choose one of the sources marked OpenTopoData, our server passes those coordinates on to api.opentopodata.org; your IP address is not passed on.
  • Terrain tools. The contour, slope, flood and viewshed maps and Geo Elevation's Area tool send the corners of the area on your map, or the point you choose with its height and radius, to the same server (elevationapi.geosq.com/terrain/), which draws the answer from our own terrain data. Nothing is passed on to anyone else.
  • Geo Tracker records with your phone's GPS. Your browser gives the page your position only after you press Start recording and allow location, and only while the page is open. The recording (positions, times, altitude, speed and the waypoints you add) is kept in your browser until you save it to your account, download it as GPX or discard it; nothing is sent to us before you press Save.
  • Geo Measure keeps your drawing in your browser until you save it to your account or clear the map, so it is still there after a reload or after signing in. Its Walk tool (and the GPS area measure page) uses your phone's GPS the same way as Geo Tracker: only after you press Start walking and allow location, and only while the page is open. The walk's positions are kept in your browser until you finish or discard it; the shape it makes is sent to us only if you press Save.
  • Map file converter. The files you open in the converter and the KML viewer are read in your browser and never uploaded.
  • The map is Google Maps. Google receives the part of the map you look at, the places and addresses you search for, and your IP address, and may set its own cookies, under the Google Privacy Policy. "My location" asks your browser for your position only when you press it; the position is used on the page and is not sent to us.

With an account

An account is optional. It exists to keep your work in My Data. We keep:

  • Your sign-in. Your email address and username, and a password stored only as a salted hash. If you sign in with Google, we receive your name, email address and profile picture address from Google, and never your Google password.
  • What you save. Measurements, elevation profiles (with the areas drawn in them), GeoJSON documents and GPS tracks, with their names and dates. A GPS track is the GPX file you recorded (locations, times, altitude, speed and waypoints) and is visible only to you. Tracks from the 2013–2019 Geo Tracker app are kept as their points and are also visible only to you.
  • Links you share. Sharing a saved item makes it viewable by anyone who has the link, until you stop sharing it or delete the item.
  • Your preferences. Units, map type and elevation source.

We send email only about your account: a welcome, a password reset you asked for, a notice that your password changed. No newsletters, no marketing lists.

Analytics and cookies

  • Google Analytics counts visits: the pages viewed, the country and city a visit comes from (worked out from the IP address, which Google Analytics does not store), the kind of device and browser, the site that sent the visitor, and which tools are used, as events such as "a shape was drawn", "a profile was exported as GPX" or "an App Store link was followed". Events carry counts and kinds, never coordinates, addresses, file contents or anything you drew. It sets cookies to tell one visit from the next. You can block it in your browser or with Google's opt-out add-on; the tools work the same without it.
  • Our own cookies are two: one keeps you signed in, one protects forms against forgery. Neither follows you anywhere else.
  • Server logs. Like any web server, ours records the IP address, time, page and browser of each request, to keep the site running and to stop abuse.

We show no advertising and we do not sell or rent your data to anyone.

Where it is kept

The site and its database run on Amazon Web Services in the United States, behind Cloudflare, which carries the traffic and protects the site. Account email is sent through Amazon SES. These companies process data for us to run the site and for nothing else. We disclose account data to authorities only when a valid legal process requires it.

Keeping and deleting

  • Saved work and your account stay until you delete them.
  • Download everything in My Data: one ZIP with all we hold for your account. The account record, what Google sent us when you signed in, your preferences and share links are in it as JSON; your measurements, elevation profiles and GeoJSON projects as GeoJSON; your tracks as GPX.
  • Delete a saved item, or all of them at once, in My Data. An item's points and its share link go with it, at once.
  • Delete your account in Settings. The account and everything saved under it are removed at once, and links you shared stop working.
  • You can stop sharing a link without deleting the item, in the tool it was shared from.
  • If you cannot sign in, or have a question about your data, write to [email protected] from the account's email address. We answer within 30 days.

Children

Geo² is not directed at children under 13, and we do not knowingly collect personal information from them.

The apps

The iPhone, iPad and Mac apps that share these tools' names keep your work as documents on your device and are not covered here; see the ObjectGraph privacy policy.

Changes

If this page changes in a way that matters, it will say so here with a new effective date. See also the Terms of Use.