Privacy Policy
Data We Collect
For general users:
- Community Reports: Location, timestamp, description, photos (if you submit bear incident reports)
- Anonymous visitor ID: A random visitor ID is used for spam prevention, saved trips, community submissions, incident reports, and error diagnostics. On the website it is stored in localStorage and the kumamap_visitor_id cookie for one year; in the mobile apps it is stored in app/device preferences and local WebView storage.
Messaging Bots (LINE, WhatsApp)
If you use our messaging bots:
- LINE: Your LINE user ID (an opaque identifier assigned by LINE) is stored for conversation logging
- WhatsApp: Your phone number is hashed with SHA-256 before any storage. We never store raw phone numbers
- Messages and bot responses are logged for quality improvement
- Recent conversation context is stored temporarily (30 minutes) and automatically deleted
Mobile Apps (iOS, Android)
If you use our mobile apps:
- Location is used to show nearby bear incidents and center the map. Your location is not stored on our servers or shared
- Anonymous usage analytics (page views) are collected via Google Analytics. A random client ID is generated and stored locally on your device
- Language preference is stored locally on your device. No account or login is required
Push Notifications
If you enable push notifications:
- A device token (web push endpoint or Firebase Cloud Messaging token) is stored to deliver notifications to your device
- The areas you follow are stored to match new bear sightings to your subscriptions
- No account or login is required. An anonymous identifier is generated on your device
- You can unfollow areas or disable notifications at any time from the Alerts page or your device settings
- Your IP address is temporarily stored for rate limiting purposes
User Accounts
If you create a Kumamap account:
- Email: We store your email address as your account identifier and to send sign-in codes. We never sell or share it.
- Display name: A non-unique label shown next to your comments, community posts, and trip plans. You can change it anytime.
- Sessions: We store an opaque random session token (server-side) so you stay signed in for 30 days. Sessions are immediately revoked on sign-out or account deletion.
- Claim of anonymous data: When you sign in for the first time, your previous anonymous push subscriptions, comments, community posts, saved trips, and submitted sightings on the same device are silently linked to your account. You can opt out by signing in from a different device.
Retention: Your account is kept until you delete it. After deletion, the account is soft-deleted for 30 days (signing in again restores it), then permanently removed. Your past comments, threads, sightings, and trip plans stay on Kumamap with the display name set to [deleted]. Bear sightings and other community contributions are public-safety data and are never destroyed; only their personal attribution is severed.
How to delete your account: In the Kumamap app or website, go to Account → Delete account. If you no longer have access to the app, visit kumamap.com/en/account/delete-by-email and verify by email.
Analytics
We use Google Analytics (GA4) across the website and mobile apps to understand usage patterns. No personally identifiable information is collected. The website uses a language preference cookie (lang_pref) that expires after one year.
Sponsor Data
If you sponsor a page:
- Email (for receipts)
- Display name (for the sponsor placement)
- Message (optional)
- Website (optional)
- Logo URL (optional)
Payment Processing
All payments are processed securely by Stripe. We do not store your payment information.
Contact Form
If you use our contact form, we collect your name, email, and message.
Data Sharing
We do not sell your personal data. Data is used to provide the Kumamap service. The one exception is data shared with advertising partners, disclosed in the Advertising Services section below.
Advertising Services
We use Ezoic to serve advertisements. Ezoic and its partners may use cookies and similar technologies for personalized ads. The full partner disclosure, cookie list, and links to manage preferences appear below.
Contact
Email: [email protected]
