Privacy, GDPR & Photo Data Protection Policy
Locapeta is engineered on a Zero-Tracking-Cookie, Local-First, and Biometric-Safe architecture protecting visitors and bystanders across the EU/EEA/UK (GDPR), Brazil (LGPD), United States (CCPA/CPRA), Mexico (LFPDPPP), and Argentina (Ley 25.326).
📷 6-Stage Place Photo GDPR & Biometric Safeguards
- Zero Faces & Human Bodies (GDPR Art. 4/6/9 & LGPD Art. 11): Our automated computer-vision gate (
LocapetaPhotoGdprGate) rejects any place photo containing identifiable human faces, full human bodies, or children. - Zero License Plates & Personal Text: Photos containing vehicle license plates, private house numbers, phone numbers, or promotional overlays are automatically blocked.
- 100% EXIF / GPS / IPTC Metadata Stripping: Every ingested photo has its JPEG
APP1/APP13/COMand PNGeXIf/tEXt/iTXtmetadata chunks stripped prior to storage, removing camera serial numbers, timestamps, and private GPS coordinates. - Zero Third-Party Image Hotlinking: Locapeta never hotlinks external stock CDNs (such as Unsplash), preventing unconsented visitor IP address disclosure to third-party image hosts.
- 24-Hour Takedown & Permanent Revocation SLA: Any bystander, property owner, or copyright holder can request immediate removal via /contact/ or [email protected]. Revoked photo URLs are permanently purged across all builds and rollbacks.
🗺️ Third-Party Map Consent Control (GDPR Art. 6(1)(a) & Art. 44)
Loading interactive Google Maps transmits your IP address to Google LLC. Visitors in EU/EEA/UK timezones have external Google Maps paused by default until consent is granted. You can grant or revoke third-party map consent at any time below:
🗑️ Data Subject Rights & One-Click Erasure (GDPR Arts. 15–21)
Saved places, check-ins, and personal notes are stored exclusively in your browser’s localStorage. You can inspect or permanently erase all local data in one tap on our Account & Browser Data Deletion page.