Privacy Policy
Last updated: 3 August 2026
The short version
Balworth collects almost nothing. No tracking cookies, no analytics scripts, no ads, no profiles, and we never sell or share your data. Exploring the map needs no account. If you subscribe, we hold your email address and a record of your subscription. Our providers keep short-lived technical logs, as every website's do. That is all of it.
1. Who we are
Balworth is a trading name of Muttlabs LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Muttlabs LLC is the data controller for the personal data described here.
Write to us at privacy@balworth.com about anything in this policy.
2. What we collect and why
- Your email address — only if you sign in. So we can send sign-in codes and know which subscription is yours. We process it to provide the service you asked for.
- Your subscription record — only if you subscribe. The Stripe customer and subscription identifiers, status, current period end, region, and the country used to work out any tax. We process it to provide the service and to meet our tax and accounting obligations.
- Technical logs. Our hosting and database providers keep short-lived server logs of requests, including IP addresses, for security and fault-finding. We do not use them to identify or profile you. We process them for the legitimate purpose of keeping the service secure and working.
- Payment details: never. Card data goes straight to Stripe and never reaches our servers. Stripe holds your payment details and billing history as an independent controller — see the Stripe Privacy Policy.
- Almost nothing else. No analytics, no advertising identifiers, no behavioural profiles, no tracking of any kind. We do not record which areas you look at. We make no automated decisions about you and we do no profiling.
3. Who processes it for us
A small number of providers, each bound by a written data processing agreement requiring them to act only on our instructions:
- Supabase — database and sign-in. Data stored in the EU (AWS eu-west-1, Ireland).
- Vercel — website and API hosting, United States, plus edge locations worldwide.
- Resend — sending sign-in codes and service emails, EU region.
- Stripe — payments, United States and globally; an independent controller for payment data and in part our processor.
We do not sell your data, we do not share it for marketing, and we do not pass it to anyone else except where the law requires it.
4. Where it goes
Your account and subscription records are stored in Ireland. Muttlabs LLC is based in the United States, so the person who runs Balworth accesses that data from the United States, and Vercel and Stripe are United States companies. Where personal data crosses a border we rely on the Standard Contractual Clauses (and the equivalent UK addendum), which our providers incorporate into their data processing agreements.
5. How long we keep it
| What | How long |
|---|---|
| Your account and email address | While your account exists, then deleted within 30 days of your asking |
| Sign-in codes and sessions | Codes expire within an hour; sessions end when you sign out |
| Subscription and payment records | Six years after your last payment — tax law requires it |
| Server and security logs | Up to 30 days |
| Support emails | Two years after the matter is closed |
6. Storage on your device
We set no tracking cookies and no advertising cookies. We use your browser's local storage for two things:
- Strictly necessary: your sign-in session, and a record of the storage choice you made here. Without these, the thing you asked for cannot work, so they do not need your consent.
- Preferences, only with your consent: your chosen layers, places, map settings and options, so the map looks the same when you return. We store nothing in this category until you have agreed, and you can withdraw agreement at any time.
Change your choice any time via Cookie settings in the footer of the home page or the account menu on the map. Signing out removes the session.
7. Third-party requests
Some content loads from third parties, which necessarily see your IP address in order to serve you: map tiles from the ONS (cdn.ons.gov.uk), our own database at Supabase, fonts from Google Fonts, and — only when you search a postcode — the postcodes.io API. None of these are used by us to track you.
8. Security
We keep personal data to a minimum. It is held with providers that encrypt it in transit and at rest. Sign-in is passwordless, so there are no passwords to steal. Access is limited to the one person who runs Balworth. If a personal data breach is likely to put your rights at risk, we will notify the relevant authority within 72 hours and tell you without undue delay where the law requires it.
9. Your rights
Whichever country you are in, you can ask us for a copy of your data, ask us to correct it, delete it, give you a portable copy, restrict what we do with it, or object to processing we do for our own legitimate purposes. Where we rely on your consent — preference storage — you can withdraw it at any time without affecting what we did before. Data protection law in your country may give you further rights; we honour those too.
To exercise any right, email privacy@balworth.com. We reply within one month, and there is no charge.
Deleting your account cancels any active subscription and removes your email address and preferences. We keep the minimum payment record that tax law requires, and it is not used for anything else.
If you are unhappy with how we handle your data you can complain to the data protection authority in your country — in the UK that is the Information Commissioner's Office, and every EU country has its own. We would rather you told us first, but you do not have to.
10. If you are in the United States
Balworth is operated by a Wyoming company and sold worldwide.
We do not sell your personal information, and we never have. We do not share it for cross-context behavioural advertising. We run no advertising, no analytics and no tracking, so there is nothing to opt out of — but if you want a formal request recorded, email privacy@balworth.com and we will confirm in writing what we hold. We do not process sensitive personal information to infer characteristics about you, and we make no automated decisions with legal or similarly significant effects.
We are not currently subject to the California Consumer Privacy Act or the comprehensive privacy laws of other US states — we are well below every applicable threshold and we do not sell personal information. We will say so here if that changes. Whichever country you are in, you can ask for a copy of your data, ask us to correct it, or ask us to delete it, and we will not treat you differently for asking.
11. Children
Balworth is not directed at children and is not designed for under-18s. You must be 18 or over to subscribe. We do not knowingly collect personal data from children. If you believe a child has given us their details, email privacy@balworth.com and we will delete them.
12. Complaints about privacy
Email privacy@balworth.com. We acknowledge within two working days and answer within one month. If you are not satisfied, your national data protection authority is above.
13. Changes to this policy
The date at the top tells you when this policy last changed. If we make a change that materially affects how we use your data, we will email account holders before it takes effect.
14. Contact
Muttlabs LLC (trading as Balworth), 30 N Gould St Ste N, Sheridan, WY 82801, United States.
Privacy: privacy@balworth.com
Everything else: help@balworth.com