Privacy

The tools run in your browser. What you draw stays there unless you make an account and save it. This page says what we keep, where it goes, and how to download or delete it.

Effective September 19, 2026. Geo² (www.geosq.com) is operated by ObjectGraph LLC ("we", "us"). Questions: [email protected].

Without an account

  • Your drawing stays in your browser. Shapes, paths, points and circles are drawn and measured on your device. GPX, KML and GeoJSON files you open are read by the page and are not uploaded.
  • Share links from the Radius, Elevation Finder, Coordinate Converter and Plot Points tools carry everything in the link itself. Nothing is stored on our server; whoever has the link sees what is in it.
  • Elevations. To look up an elevation, the page sends the coordinates of your points to our elevation server (elevationapi.geosq.com). If you choose one of the sources marked OpenTopoData, our server passes those coordinates on to api.opentopodata.org; your IP address is not passed on.
  • The map is Google Maps. Google receives the part of the map you look at, the places and addresses you search for, and your IP address, and may set its own cookies, under the Google Privacy Policy. "My location" asks your browser for your position only when you press it; the position is used on the page and is not sent to us.

With an account

An account is optional. It exists to keep your work in My Data. We keep:

  • Your sign-in. Your email address and username, and a password stored only as a salted hash. If you sign in with Google, we receive your name, email address and profile picture address from Google, and never your Google password.
  • What you save. Measurements, elevation profiles, GeoJSON documents and GPS tracks, with their names and dates. Tracks hold locations and times; a track is private unless you mark it public, and a public track is listed on the Geo Tracker page for anyone to see.
  • Links you share. Sharing a saved item makes it viewable by anyone who has the link, until you stop sharing it or delete the item.
  • Your preferences. Units, map type and elevation source.

We send email only about your account: a welcome, a password reset you asked for, a notice that your password changed. No newsletters, no marketing lists.

Analytics and cookies

  • Google Analytics counts visits: the pages viewed, the country and city a visit comes from (worked out from the IP address, which Google Analytics does not store), the kind of device and browser, the site that sent the visitor, and which tools are used, as events such as "a shape was drawn", "a profile was exported as GPX" or "an App Store link was followed". Events carry counts and kinds, never coordinates, addresses, file contents or anything you drew. It sets cookies to tell one visit from the next. You can block it in your browser or with Google's opt-out add-on; the tools work the same without it.
  • Our own cookies are two: one keeps you signed in, one protects forms against forgery. Neither follows you anywhere else.
  • Server logs. Like any web server, ours records the IP address, time, page and browser of each request, to keep the site running and to stop abuse.

We show no advertising and we do not sell or rent your data to anyone.

Where it is kept

The site and its database run on Amazon Web Services in the United States, behind Cloudflare, which carries the traffic and protects the site. Account email is sent through Amazon SES. These companies process data for us to run the site and for nothing else. We disclose account data to authorities only when a valid legal process requires it.

Keeping and deleting

  • Saved work and your account stay until you delete them.
  • Download everything in My Data: one ZIP with all we hold for your account. The account record, what Google sent us when you signed in, your preferences and share links are in it as JSON; your measurements, elevation profiles and GeoJSON projects as GeoJSON; your tracks as GPX.
  • Delete a saved item, or all of them at once, in My Data. An item's points and its share link go with it, at once.
  • Delete your account in Settings. The account and everything saved under it are removed at once, and links you shared stop working.
  • You can stop sharing a link without deleting the item, in the tool it was shared from.
  • If you cannot sign in, or have a question about your data, write to [email protected] from the account's email address. We answer within 30 days.

Children

Geo² is not directed at children under 13, and we do not knowingly collect personal information from them.

The apps

The iPhone, iPad and Mac apps that share these tools' names keep your work as documents on your device and are not covered here; see the ObjectGraph privacy policy.

Changes

If this page changes in a way that matters, it will say so here with a new effective date. See also the Terms of Use.