Privacy Policy

No ads, no tracking. Your checklist progress stays on your device unless you turn on PRO sync in the iPhone app, and even then we never know who you are. The personal records we keep are the email behind a web PRO purchase, so you can sign in on any device, and the email you give our launch day list if you join it; what each holds and how to delete it is below.

Effective October 30, 2026. This policy covers every place Leonida Map runs: this website, the Leonida Map iPhone app on the App Store and the Leonida Map Android app on Google Play. Leonida Map is an unofficial fan-made companion, not affiliated with, endorsed by or connected to Rockstar Games or Take-Two Interactive.

The short version

• No ads, no analytics SDKs, no tracking across apps or websites. The only sign-up is the optional launch day email list.
• Your checked items are saved on your phone (or in this browser). We do not see them unless you have PRO and sync is on, and then they are stored under a one-way hash of your Apple transaction, with no name, email or device identity.
• Content, map, checklist and countdown data is downloaded from our server; those downloads are not tied to you.
• Apple handles iPhone app payments and Stripe handles web payments. The Android app sells nothing, so it uses no Google Play Billing. We never see your card number.
• Web PRO is tied to the email you paid with. We keep that email, the id of your Stripe payment and its date so you can sign in on any device or browser, and nothing else about you. Email us to delete it.

What the apps send to our server

The iPhone app and the Android app send the same things.

• Data downloads. The app asks our server (Cloudflare Workers) for the latest content, map, checklists and countdown. Like every internet service, the server sees your IP address while it answers. It stores no addresses.
• Install ID. On first launch the app makes a random ID that is not linked to you. It is sent with usage counts so one install cannot flood the counters. The server stores only a one-way hash of it, with a daily count, deleted after 30 days.
• Usage totals. We count how many times the app is opened and how many times the map, places, people, lists, paywall and settings screens are opened each day, as totals with no identity, so we know what people use.
• Where you heard about us. After your first checked item the app asks one optional question: where you heard about Leonida Map (TikTok, Instagram, YouTube, Reddit, App Store search, a friend or other). Your answer stays on your device. The app sends only that channel name once, and again with a PRO purchase. The server keeps daily totals per channel, not linked to you. If you skip the question, nothing is sent.
• Problem reports. "Report a mistake" sends only the reason you pick (wrong, missing, other). No text, no identity.

What this website sends

• Page views. Each page you open sends its address and, if the link you first arrived with carried one, a short source tag (for example ?s=tiktok). The server keeps daily totals per page and tag, with no id and no cookie.
• Web PRO. When you come back from Stripe, the page sends our server the payment session id from the return link and the server asks Stripe whether that payment is confirmed. When you sign in, the page sends the email you type; the server looks it up in our buyer records and, if it is not there, asks Stripe whether that email paid for PRO through our Payment Link. If it did, a one-time sign-in link goes to that email from our Gmail address; the link's token is stored with the email for 30 minutes and deleted when it is used. Sign-in requests are counted per hour under one-way hashes of your IP address and of the email, kept for two hours, so the form cannot be used to flood an inbox. The same source tag rides along to Stripe as a reference on the payment, so we can count sales per channel.

Launch day email list

If you join the launch day list, our server stores the email you type, the date, the page you joined from, a random share code and, if you came through a friend's share link, that friend's code, filed under a one-way hash of the email. We use it only to send you one email on November 19, 2026 with the live map and the first verified in-game spots, and to turn on PRO for your email on launch day if 3 friends join with your link. Nothing is sent before then, and we do not sell or share the list. Join requests are counted per hour under a one-way hash of your IP address, kept for two hours. To be removed, reply to our email or write to amanahkeep+vimap@gmail.com, and we delete your record.

PRO checklist sync (iPhone PRO only)

When you buy PRO, the app can store your checked item ids on our server so they come back after a reinstall or on a new iPhone signed in to the same Apple Account. To prove the purchase, the app sends Apple's signed transaction record; the server checks Apple's signature and stores your checked items under a one-way hash of the transaction number. The record contains no name, email or payment details. You can clear this state by resetting your checklist progress in Settings while PRO is active (the server copy is replaced with an empty list).

Purchases

Android: the Android app on Google Play has no in-app purchases and no PRO, so it uses no Google Play Billing and sends no purchase data. Everything in it is free.

iPhone: Leonida Map PRO is a one-time in-app purchase sold by Apple through the App Store under Apple's privacy policy. We receive only what StoreKit gives every app: that PRO was bought on this Apple Account.

Web: PRO on this website is sold through Stripe. Stripe collects your payment details under its own privacy policy; we never see your card number. When you return from Stripe, our server confirms the payment with Stripe and stores one buyer record: the email you gave Stripe, the id of that Stripe payment session and the date, filed under a one-way hash of the email. It stores nothing else about you: no name, no address, no payment details. We keep it because PRO is for life and that record is what lets you sign in with your email on any device or browser later; it is not deleted on a timer, so it stays until you ask us to delete it. To delete it, write from the email you paid with to amanahkeep+vimap@gmail.com. Deleting it does not remove Stripe's own record of the payment, which Stripe keeps under its policy; our server still checks that record when you sign in, so you keep your unlock.

On your device

Your checked items, your settings, the downloaded content, map and checklist data, the install ID and (on the web) your PRO unlock, the source tag of the first link you arrived with and your launch list share codes are stored inside the app on your phone or in your browser's local storage. Delete the app or clear site data, and they are gone.

Sharing

We do not sell or share personal data. The service providers that process a request for us are Cloudflare (servers and storage), Apple (iPhone app payments), Stripe (web payments) and Google (Gmail sends the web PRO sign-in email). Apple and Google also deliver the apps through the App Store and Google Play under their own privacy policies. Checklist progress leaves your device only when you share it yourself through the share sheet.

Children

Leonida Map is not directed to children under 13, and we do not knowingly collect personal data from children. The game it accompanies is rated Mature by the ESRB.

Your rights

Apart from the web PRO buyer record and the launch day list described above, we hold no names, emails or profiles, so there is nothing else to look up or export. To see or delete your buyer record or your launch list record, write from that email to amanahkeep+vimap@gmail.com; we answer within two days. If you email us, we use your message only to answer it. Write to the same address with any privacy question.

Changes

If this policy changes, we will update this page and its effective date.