Stamped

Privacy Policy

Last updated: May 28, 2026

Data Collection and Storage

Stamped is local-first: your full travel map — including notes and visit dates — is stored in your browser by default. We do not require an account, and we do not collect your email or other profile information.

If you choose to generate a share link, a limited snapshot of your map (map name, country statuses, and city statuses only) is stored on our servers for up to 90 days so others can view it. See Share Links below.

Local Storage

Your complete travel data — country statuses, notes, and visit dates — is stored in your browser's localStorage. This data:

  • Remains on your device unless you share a link (see below)
  • Is not uploaded to our servers except when you explicitly create or update a share link
  • Can be cleared at any time by clearing your browser data
  • Is not accessible to other websites

Share Links

When you generate a share link, the following information is stored on our servers (Upstash Redis) for up to 90 days and is viewable by anyone you send the link to:

  • The display name you chose for the share
  • The list of countries you've marked, with their statuses (visited / planning / want to visit)
  • The list of cities you've stamped, with their statuses (visited / planning / want to visit)

Share snapshots are deleted automatically after 90 days. Opening Share again from the same browser updates the stored snapshot and extends the expiry. Your browser keeps an anonymous edit token locally for this purpose — we do not store your email, account, or device identity with the share.

Your notes and visit dates are never included in share links. They stay on your device.

Third-Party Services

We use the following third-party services:

  • Natural Earth — country boundary and name data (Admin 0 countries), bundled for map display
  • world-atlas — TopoJSON packaging of Natural Earth data (ISC License)
  • Natural Earth Populated Places — city names and coordinates (filtered subset), bundled locally
  • Upstash Redis — ephemeral storage for share link snapshots (map name, country/city statuses only). Data expires after 90 days. See Upstash's privacy documentation
  • Vercel — hosting, deployment, and bandwidth delivery
  • Vercel Analytics — privacy-friendly, cookie-less aggregate analytics. It records anonymized page views and a small number of custom events (such as "share link copied") for product analytics. It does not collect personally identifiable information and does not use cross-site tracking. See Vercel's analytics privacy policy for details.

Data Security

Your full map (including notes and visit dates) stays in your browser. Share snapshots on our servers contain only the fields listed above. We recommend keeping your browser and device updated.

Contact Information

For questions about this Privacy Policy, please contact us through our GitHub repository.