Email or username:

Password:

Forgot your password?
OpenCage πŸ‘‰πŸŒ

After a few weeks of #geoweirdness threads, this weekend let's switch things up and do some #geoeducation

One topic that often comes up around location data is privacy πŸ•΅οΈ

If you accurately know where someone spends their time, you can often figure out who they are. Users of our geocoding API have to send us location info. So, how can they ensure privacy?

πŸŒπŸ§΅πŸ‘‡

#privacy #dataprotection

11 comments
OpenCage πŸ‘‰πŸŒ

2/ From day one, we've known one of the key value propositions of our geocoding API is that some customers really do NOT want to share data with Google and other internet giants.

So privacy has been a continual focus for us, not an afterthought.

We're a πŸ‡©πŸ‡ͺ πŸ‡ͺπŸ‡Ί German legal entity thus fully compliant with GDPR.

Here's our GDPR policy: opencagedata.com/gdpr

and you can easily see all the details of exactly who we are on our about page: opencagedata.com/about

#geoeducation

Screenshot of the OpenCage GDPR policy
OpenCage πŸ‘‰πŸŒ

3/ But let's get into what we actually do about privacy.

It starts with our website, where we don't use Google Analytics or any other trackers.

Instead, we use privacy-focused Fathom Analytics so we can anonymously see what is happening on the site without tracking anyone. Our Fathom account is configured so that all data stays in the EU πŸ‡ͺπŸ‡Ί.

usefathom.com

EDIT: here's a Fathom referral code if you want a discount: usefathom.com/ref/Q1OOEC

#geoeducation #privacy

Screenshot of Safari browser showing there are no trackers on the OpenCage site
OpenCage πŸ‘‰πŸŒ

4/ Our website and API are of course both available via HTTPS (happily this has increasingly become the norm on the web)

screenshot showing an A+ score for SSL configuration of the opencagedata.com domain
OpenCage πŸ‘‰πŸŒ

5/ When you sign up for a free trial of our service all you need is a working email.

Inactive free trial accounts get deleted after 6 months. Of course, you can also delete your account sooner anytime you like.

And don't worry 😟, signing up doesn't put you on our marketing list. We have no marketing list βœ‰οΈπŸš«

#privacy #geoeducation

OpenCage πŸ‘‰πŸŒ

6/ If you become a paying customer we do legally have to store a record of the transaction, but you can, with the single click of a button, delete your payment info once you stop being a customer.

blog.opencagedata.com/post/del

All card billing is done via our payment processor Stripe, we never hold a record of your card details.

Screenshot of OpenCage blog post explaining how you can delete your payment details once you stop being a customer
OpenCage πŸ‘‰πŸŒ

7/ So now let's get into the geocoding API itself.

First up, please send us only location information, never details of who is at that location. Besides privacy concerns it just makes geocoding much harder.

Please see: opencagedata.com/guides/how-to

#geoeducation

OpenCage query formatting best practice explaining not to send us anything other than addresses
OpenCage πŸ‘‰πŸŒ

8/ Next, if you use the optional "no_record" parameter in your API call, we will keep ... absolutely no record of what your query was. None. Nada. Zilch.

opencagedata.com/api#no_record

#geoeducation #privacy

Screenshot from the OpenCage geocoding API docs explaining the optional no_record parameter
OpenCage πŸ‘‰πŸŒ

9/ Finally, we do our best to educate users of the API about privacy implications of location data.

For example here is a guide to NOT showing precisely geocoded locations

opencagedata.com/guides/how-to

#geoeducation

Screenshot of OpenCage guide to using only imprecise or coarse location data
OpenCage πŸ‘‰πŸŒ

10/ Digital privacy is a continually evolving issue. New technology makes so much possible, but also exposes us to new risks. It's a topic that is never "done".

We welcome (and pay for) suggestions as to how we can improve security. Here's our bug bounty program, at the bottom you can find a list of bug reports we've paid for:
opencagedata.com/security-boun

Here's a report we wrote about our experiences running a bug bounty program as a smaller company:
blog.opencagedata.com/post/run

#geoeducation

10/ Digital privacy is a continually evolving issue. New technology makes so much possible, but also exposes us to new risks. It's a topic that is never "done".

We welcome (and pay for) suggestions as to how we can improve security. Here's our bug bounty program, at the bottom you can find a list of bug reports we've paid for:
opencagedata.com/security-boun

Screenshot of the OpenCage security bounty program page
OpenCage πŸ‘‰πŸŒ

11/ Thanks for reading and sharing

Please get in touch if you have any questions (or suggestions) about our approach to privacy or security (or anything else).

We have more threads about #geoeducation, the #geoweirdness of specific countries, border disputes, geocoding, etc linked on our blog: blog.opencagedata.com/geothrea

Stay safe and private! πŸ•΅οΈ

Screenshot of the OpenCage blog page listing all of our geothreads
OpenCage πŸ‘‰πŸŒ replied to OpenCage

Final bonus toot - what to do if you want the benefits of tracking where you’ve been without the privacy risk? πŸ•΅οΈπŸ—ΊοΈ

Please check out our friends at @owntracks owntracks.org an open source, privacy-focused journey tracking and sharing software

#privacy #geoeducation

Go Up