Privacy policy

here* is a website at itshere.app where you can save places, build lists, and see what people you trust are into.

This page explains what information we collect, why, and what you can do about it. We've tried to write it in plain language rather than the usual thing.

Who we are: Juliette Wang, 1311 Park St Unit #780, Alameda, CA 94501, USA. We're the ones responsible for the information described here.

Questions or requests: team@itshere.app

here* is a preview

We're sharing here* with a small, invited group while we build it.

That means we may reset, migrate, or delete accounts and saved places as things change. We'll try to warn you first, but keep your own copy of anything you'd be sad to lose — including anything you imported from somewhere else.

It also means our data practices may change as the product does. We'll update this page and tell you when we do.

What we collect

What you give us

• Your email address and username
• Your profile photo, if you add one
• The places you save, the lists you build, and any notes or tags you write
• Who you follow, and anyone you block
• Anything you send us — feedback, bug reports, replies to our questions

What we collect automatically

• Your IP address
• Your browser type and general device type
• A log of actions you take in here* — creating a playlist, saving a spot, following someone — with a timestamp

We use this to keep the site working and to understand what people actually do with it.

Signing in with another account

If you sign in through Google or another provider, we receive your name, email address, and profile photo from them. We don't get access to anything else.

What we don't collect

We want to be specific about this, because a lot of policies are vague on purpose.

• We don't collect your location. Not approximate, not precise, not in the background. If we add location features later, your browser will ask you first, and we'll update this page before we turn anything on.
• We don't sell your information. Not now, not later without asking you first.
• We don't show ads on here*, and we don't use here* to build advertising profiles about you.
• We don't buy information about you from data brokers or marketing partners.
• We don't record your screen or replay your sessions.

If any of this changes, we'll tell you before it does — not after.

Why we use it

• To run here* and keep your account working
• To show you places, lists, and people
• To fix what's broken and figure out what to build next
• To send you occasional email about the preview — you can opt out any time
• To keep the site secure and deal with abuse
• To meet legal obligations

If you're in the UK or EU

We rely on these legal bases: performing our agreement with you (running your account), our legitimate interests (keeping the site working and secure, improving it), your consent (analytics cookies, marketing email), and legal obligations.

You can withdraw consent at any time without affecting what came before.

Who we share it with

We don't sell your information and we don't share it for advertising.

We do rely on a small number of service providers to run here*, and they process information on our behalf under contract:

• Hosting: Vercel
• Database, sign-in, and file storage: Supabase
• Email: Mailchimp
• Content management: Sanity
• Image storage: Google Cloud Storage
• Maps and place data: Google Maps Platform
• Analytics: Google Analytics, Vercel Web Analytics

Analytics. We use Google Analytics to understand how people find and move around here*. Google processes that data on its own terms — see Google's privacy policy. We've turned off Google's advertising and personalisation features, so this isn't used to target ads at you.

We also use Vercel's built-in web analytics, which counts visits and page views without cookies and without anything that identifies you.

And we keep a simple log of actions in our own database — things like "playlist created" or "spot saved" — so we can see what people actually use. That log stays with us.

About maps specifically. The maps and place information on here* come from Google Maps. When a map loads, Google receives your IP address and basic technical information directly, the same way it would on any site using Google Maps. What Google does with that is covered by Google's privacy policy, not this one.

Beyond that, we may share information if the law requires it, to protect someone's safety or our rights, or if here* is ever acquired or merged — in which case we'll tell you before your information moves.

And the obvious one: anything you choose to share on here* is visible to the people you've shared it with. That's the product.

What other people can see

Lists you create are public by default. You can switch a list to private, but if you don't, assume other people can see it. We'll say so in the app when you make one.

Public lists and profiles can be opened by anyone with the link, whether or not they have a here* account. Everything else — saving, following, building your own lists — needs an account.

Public lists and profiles can also show up in Google and other search engines. That means your username, profile photo, and the lists you've made public are findable by anyone searching, not just by people you sent a link to. If you'd rather that didn't happen, set your lists to private.

The cover image you upload for a list is stored at a public web address. It's long and effectively unguessable, so it won't turn up by browsing — but it isn't locked, even for private lists. Treat cover images as less private than the list itself.

Blocking. You can block someone. We record that so we can keep the two of you apart in the app. Blocking hides you from each other in here*, but it can't pull back anything already shared, and it doesn't hide a public list from someone who has the link.

If you delete your account, your lists come out of other people's saves too — they don't get to keep a copy.

One thing that does stay: if someone saved an individual spot from your list, that spot remains in their own saves. A place isn't yours or theirs, and we don't record that they found it through you.

Cookies

We use two kinds:

• Essential cookies keep you signed in. here* doesn't work without them.
• Analytics cookies, set by Google Analytics, tell us how people find and use the site.

We don't use advertising cookies.

When you first visit here* from the UK or EU, we'll ask whether you're ok with the analytics cookies. Nothing analytics-related loads until you say yes, and you can carry on using here* normally either way. You can change your answer any time through the "Cookies" link in our footer.

You can also block cookies in your browser, but you won't be able to stay signed in.

Do Not Track. Browsers can send a "Do Not Track" signal. There's still no agreed standard for what a site should do with it, so we don't currently respond to it.

How long we keep things

We keep your account information and saved places while your account is open.

You can delete your account yourself, in your settings.

When you do, your profile, lists, and saves disappear from here* straight away — nobody else can see them. We hold the account for 14 days in case you change your mind. Log back in during that window and everything comes back. After 14 days it's permanent, and we finish removing your information within 30 days of your original request.

Three things to know:

• Search engines are outside our control. If your profile or lists were public, Google and others may have already copied them. We remove the pages, but it can take weeks for search results to catch up, and cached copies may linger. We can ask Google to speed that up if you email us, but we can't promise how long it takes.
• Our providers keep routine backups, so copies may persist for a short period before they're overwritten.
• We keep overall counts — how many people saved a place — with no link back to you. That's part of what powers recommendations, and it stays after you've gone.

Your choices

You can:

• See and edit your profile in your account settings
• Delete your account, and your information with it, in your settings
• Ask us for a copy of what we hold
• Ask us to correct it
• Unsubscribe from our emails

For anything that isn't in your settings, write to team@itshere.app. We're small, so a copy of your data gets put together by hand — we'll get it to you within 30 days at the latest, usually much sooner. We won't treat you differently for asking.

Depending on where you live, you may also have the right to object to certain processing, ask us to restrict it, request portability, or complain to your local data protection authority. In the UK, that's the ICO.

Security

We protect your information with encryption in transit, access controls, and a small number of people who can reach the data.

We should be straight with you: here* is an early preview built by a small team. We take security seriously, but no system is perfectly secure, and we can't guarantee yours won't ever be exposed. Don't put anything on here* you couldn't stand to have get out.

Age

here* is for people 18 and over.

We don't knowingly collect information from anyone under 18. If you think a minor has given us information, email team@itshere.app and we'll delete it.

Where your information goes

We're based in Alameda, California, and one of us works from the United Kingdom. Your information is held on servers run by the providers listed above, and may be accessed by us from the United States and the United Kingdom.

If you're in the UK or EU, that means your information leaves your country. We rely on standard contractual clauses and the UK International Data Transfer Addendum where required.

Changes

We'll update this page as here* changes.

If we make a material change — collecting something new, using it for a new purpose, sharing it with someone new — we'll email you before it takes effect, not after. The date at the top always tells you when this was last revised.

Contact

Juliette Wang 1311 Park St Unit #780 Alameda, CA 94501

team@itshere.app