What Locatr collects, and what it doesn’t.

Five things, and nothing else:

• —Your email address and a hashed password — so you can have an account and sign in.
• —Subscription status — which plan, whether it is active, and when it renews. No card details — those go straight to the payment processor and never reach Locatr.
• —Page views — which pages are visited, the referring site, and your country, browser and device type. No cookies, and nothing that follows you to other sites.
• —Your IP address, briefly — only to rate-limit sign-in and sign-up against attack, and deleted automatically within about seventy minutes.
• —Standard server logs — kept by the hosting provider as part of running the site.

There is no advertising, no profiling, no selling of data to anyone, and no tracking across other websites. Each item is explained in full below.

Locatr is the product described on this site — a Mac app for changing what location an iPhone reports. It is run by a single independent operator rather than a registered company, so “Locatr” throughout this page means that operator acting under the product name.

For any privacy question or request, email 13nik09@gmail.com.

Creating an account stores your email address and a hashed password. Sign-in is handled by a third-party authentication provider; the password is hashed by them and is never visible to Locatr in readable form.

Staying signed in requires cookies. These are strictly necessary — they hold your session and nothing else. They are not used to profile you and not shared with anyone.

Subscriptions are handled by a third-party payment processor, on their own hosted checkout and billing pages. Card details never reach Locatr’s servers — the app redirects you to the processor, and they collect the details directly.

What is stored here is the minimum needed to know whether your subscription is active: the processor’s customer and subscription identifiers, the plan, its status, and the renewal date.

An email delivery service sends account and billing email — for example, a notice that a payment failed. It receives your email address in order to deliver those messages. No marketing email is sent.

This site uses a cookieless analytics service, provided by our hosting platform, to count page views. It records the page path, the site that referred you, and coarse details about your device: country, browser, operating system and device type.

It sets no cookies and stores nothing on your device. Instead of a cookie, it identifies a visit using a short-lived hash derived from the incoming request, which is discarded after 24 hours. There is no identifier that follows you to other sites, and the results are aggregated rather than tied to you as an individual.

Because there is no advertising or cross-site tracking on this site, there is no consent banner to click through.

Sign-in, sign-up, checkout, email confirmation and password reset are rate limited by IP address, so that an attacker cannot make unlimited attempts. Applying that limit means briefly recording the IP address a request came from, together with a counter.

The longest rate-limit window is one hour, so these records stop being useful after that. They are deleted automatically once they are more than an hour old by a scheduled job that runs every ten minutes — meaning an entry exists for at most about seventy minutes. They are not used for anything else, and are not linked to your account.

The site runs on a third-party cloud hosting provider, which keeps standard server request logs as part of operating the service. The database is run by a third-party database provider. Both are established platform vendors operating under their own published security and privacy terms.

Email 13nik09@gmail.com to ask what is held about you, to get a copy, or to have your account deleted. Deleting your account removes your account record and its subscription record. Cancelling a subscription can be done yourself at any time from the billing portal in your dashboard.

This policy is governed by the laws of the State of Florida, United States, without regard to its conflict-of-law rules, and any dispute belongs in the courts located there. If what the site collects changes, this page changes with it and the date at the top is updated.