YOUR DATA, IN PLAIN ENGLISH

Privacy

Last updated: 1 November 2026

This notice explains what GlooBoo collects, why we use it, and the choices you have.

Who is responsible for your data

The person or business that operates GlooBoo decides how your personal data is used and is responsible for it. For privacy questions or requests, email [email protected].

Information we use

• Sign-in and account: Google provides account details needed to sign you in, such as your email address, name and Google account identifier. We also keep your account settings and display name.
• Profile: your display name, optional bio, profile photo, and any social-profile links you choose to add with Pro. We remove those links when Pro access ends.
• Your globe: pins and their exact coordinates, place and country names, notes, ratings, categories, visited or wishlist status, dates, captions and photos.
• Subscription: if you use Pro, we keep Stripe customer and subscription identifiers, plan, status and billing-period information. Stripe handles payment details such as your card number; GlooBoo does not receive or store your full card number.
• Technical information: when you visit, our hosting, storage and content-delivery providers may receive information such as your IP address, browser, device, time of request and the page or file requested. We use essential session and security cookies.
• Support and safety reports: if you contact us or report misuse, we receive your message, contact details and any evidence you provide. We may keep relevant records of a report, a security incident and how we handled it.

How we use it and our legal reasons

• Contract: where UK data-protection law applies, we use your account, profile and globe information to provide the service you request, including place search and subscription features.
• Legitimate interests: we use relevant information to protect, maintain and troubleshoot the service, investigate suspected misuse, prevent fraud and enforce our terms. We assess these interests against the impact on your rights and freedoms.
• Legal obligations: we keep or disclose information when required by law, including binding court orders and applicable financial record-keeping requirements.
• Vital interests: in an emergency, we may use or disclose information where necessary to protect someone's life.

We send the search text or map coordinates to the Photon place-search service from our server so it can return place names. We do not keep a separate history of your searches.

We do not sell your personal data. The app does not currently use it for targeted advertising or marketing.

Private globes and public sharing

Your globe page is private unless you turn on sharing. Photo files have separate public URLs, as explained below. A shared globe is viewable by anyone with its unlisted link and includes your display name, profile photo and bio, any social-profile links you have added, along with all pins, exact locations, notes, ratings, dates, categories and pin photos. We ask search engines not to index shared pages, but cannot guarantee they will not be discovered or copied. Turning sharing off stops access through the globe page, but cannot take back information already viewed, copied or saved by someone else.

Public photo URLs

Uploaded pin photos, their thumbnails and profile photos are public files delivered through public web addresses (URLs). Anyone who obtains a photo URL can view, download, copy or share that image without signing in to GlooBoo, even when your globe page is private or sharing is turned off.

Globe-sharing settings apply to the globe page and do not restrict access to the photo files themselves. Turning sharing off or changing your globe's share link does not invalidate existing photo URLs, and those URLs do not automatically expire. Browsers and our image CDN may retain cached copies for up to one year under our current cache settings, including after replacement or deletion. We cannot recall copies someone has already saved.

We convert uploaded photos and strip embedded metadata such as GPS data before storing them. The image itself may still reveal people, places or other personal information. Only upload photos you have the right to make available in this way, and avoid confidential or sensitive images that need restricted access.

Who helps us provide the service

The following providers and sharing features are involved in running GlooBoo:

• Google handles Google sign-in and provides the account details used to create your account.
• Stripe handles checkout, payment details and subscription management when you use Pro.
• Photon receives place-search text or coordinates when you use search. The default search endpoint is the public Photon service; the service configuration may use another compatible endpoint.
• Hosting, database, storage and CDN providers store and deliver the app and its files. Uploaded photos are stored in DigitalOcean Spaces in the current deployment.
• Website asset CDNs deliver the globe libraries and country-map data used by the site. If you choose to open a pin in Google Maps, Google receives the coordinates in that map request.
• Visitors can see your shared globe if you turn on globe sharing. Anyone who obtains a direct photo URL can access that image as described above, including when your globe page is private.

These providers may process information under their own privacy terms and may use facilities outside the UK. The exact hosting and storage locations depend on the service configuration. Where UK law requires a safeguard for an international transfer, we will put an appropriate safeguard in place. Contact us for more information.

Misuse, safety and disclosures to authorities

Illegal or serious improper use of GlooBoo may lead to content removal, suspension or permanent account removal under our Terms of Service. We may preserve relevant information and share it with the police, courts, regulators or other competent authorities:

• To comply with a binding court order or another legal obligation.
• To respond to a request that we have checked is lawful, where sharing is necessary and proportionate for the authority's legitimate investigation or function.
• To make a lawful report of suspected crime or fraud, or help prevent serious harm, where we have an appropriate legal basis for doing so.

Depending on the circumstances, this may include account and contact details, relevant pins, notes, photos or other content, and available technical or access records that we hold. Where legally justified, this can include relevant content from a private globe.

We assess the identity and authority of the requester, the purpose and scope of a request, and the applicable legal basis before disclosing personal data. We share only the information relevant and necessary for that purpose. Where information is sensitive or relates to alleged criminal offences, we also meet the additional conditions required by applicable data-protection law.

Where lawful and appropriate, we will let you know about a request or disclosure. Notice may be delayed or withheld where the law allows or requires this, for example to avoid prejudicing an investigation or putting someone at risk.

Cookies

GlooBoo uses cookies that are needed for sign-in, keeping your session and protecting forms from cross-site requests. The app does not currently use advertising or analytics cookies. Google or Stripe may use their own technologies when you visit their sign-in, checkout or billing pages; their privacy notices explain those uses.

Keeping information secure

We use safeguards intended to protect account and globe information, including access controls and secure connections. No website or online storage can be guaranteed completely secure. Keep your Google account secure and do not share a globe link or photo URL unless you are comfortable with others seeing it.

How long we keep information

We keep account and globe information while your account is active. You can delete your account in the account settings; this removes your account, globe, pins, notes and uploaded images from the active service and cancels an active subscription. Stripe may retain payment and transaction records under its own legal and record-keeping obligations. Hosting providers may retain routine logs or backups for their own retention periods, and the CDN may retain cached images for up to one year.

We may retain limited relevant records after account deletion or removal when required by law, or when necessary for a security incident, fraud prevention, a lawful investigation, or establishing, exercising or defending a legal claim. We restrict access to these records and keep them only for as long as needed for the specific purpose, then delete them or make them anonymous, subject to any legal retention requirement.

Your choices and rights

You can edit your profile and pins, remove photos, turn sharing off, or delete your account. Depending on the law that applies to you, you may also ask us for a copy of your personal data, correct it, delete it, restrict or object to some uses, or transfer certain information to another service. Email [email protected] to make a request. We may ask for information to confirm your identity before acting on a request.

If you are in the UK, you can complain to the Information Commissioner's Office (ICO). If you are elsewhere, you may contact your local data-protection authority.

Changes and contact

We may update this notice when the service or its data use changes. We will update the date at the top when we do. For questions about this notice, email [email protected].