Privacy

This notice describes the Pointaris website and the live guidance app. It is a working draft for counsel review. It is not a finished privacy policy.

Three Paths operates this site for Pointaris / Directional Interface. Questions about privacy go to ops@threepaths.co.

Live location is shared only during an active guidance room. The Seeker’s position, speed, and heading are sent to the people in that room: the Guide who created it, and anyone who opens the share link or QR code for that room. It is not posted on the marketing pages, and it is not sold.

A room ends when it is no longer updated. We delete the live session, including the traced route, intel pins, commands, acknowledgements, and the Seeker’s last position, 24 hours after the last update. If the app is running without a database, that copy lives only in the memory of the server process and disappears when the process stops.

You can join as a Seeker without an account. The full share link or QR code is the access control. It carries a secret, and a room code by itself does not open the room. Anyone with that link can see the room until it expires, so share it only with the person you are guiding. Links created before this secret was added stop working.

Saved routes, destinations, searches, and shortcut notes are stored in this browser first. If you are signed in, or if this device has an id, a copy may also be kept in our database so the same library can load on a later visit.

Before the first session, and again after a Terms version change, we store your safety acknowledgement on this device: the terms version and the time you agreed. If you are signed in, that same record is tied to the account. The checkbox is never pre-selected.

An account is a name and email kept so a safety acknowledgement can be tied to you, and so a library can be stored under that email. You do not need an account to open the site or to join as a Seeker. Signing out deletes the session cookie. It does not by itself delete routes saved in the browser.

If you ask to hear about the iPhone and Android apps, or you write about licensing, and you check the consent box, we store the email address, the time, whether the note was a native-app notice or a licensing question, any campaign labels on the link you used, and a hash of the IP address. We do not store the raw IP address. Pointaris already works in the browser. We keep the email so we can tell you when those store apps launch, or reply if you asked about licensing. We do not sell the list. If a sending address is configured, we also email ops@threepaths.co about a new signup. To have the address removed, email ops@threepaths.co from that address.

A Guide can place a SoloMaps sheet, or another map image, under a walking route. Everyone in that room sees the same sheet while the room is active. The sheet image may be loaded from the address the Guide provides, or from a SoloMaps connection if one is configured later.

Sharing hazard pins with SoloMaps is off. SoloMaps is not taking those pins yet, so Pointaris does not send them. A later version would send only a pin type, a rounded location, a short label, shortcut names, and the sheet id, and would not include your name, email, or device id.

A signed-in browser gets an httpOnly cookie that holds a random account token. The app also uses local storage for a device id, the safety acknowledgement, and saved routes. We do not run a paid analytics service.

We count visits to our public pages with a privacy-friendly, cookieless counter. It doesn't use cookies, store IP addresses or collect personal information, and it isn't used inside live guiding sessions.