Privacy Policy
Last updated: August 11, 2026
1. Introduction
AnimateMyMap ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
Personal Information
We collect information that you provide directly to us:
- Account Information: Email address, username, password (encrypted)
- Profile Information: Display name, profile picture (if using Google OAuth)
- Billing Information: Payment details for paid subscriptions (processed securely by third-party providers)
Usage Information
We automatically collect certain information about your use of the Service:
- Which videos you render and their settings (resolution, length) — the files themselves are covered in Section 8
- Features used and frequency of use
- Browser, operating system, device type, screen size and language, as reported by your browser
- Your IP address, used for security, abuse prevention and rate limiting. Our self-hosted analytics derives only a country from it; we never collect a precise location, and neither the website nor the Android app asks for location access.
Content You Create
Your projects (the maps, timelines, text and images that make up an animation) are stored on our servers so you can return to them. If you use the optional AI assistant, the parts of your project needed to answer your request are sent to our AI provider — see Section 4.
Android App
When you use the AnimateMyMap Android app, two additional pieces of information are involved:
- Advertising ID: the app shows ads through Google AdMob, which uses your device’s resettable advertising identifier. See Section 6.
- Purchase token: if you subscribe or buy a pass in the app, Google Play gives us a purchase token that we verify with Google to activate your plan. We never receive your card details.
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send technical notices and support messages
- Respond to your comments and questions
- Monitor and analyze usage patterns
- Detect and prevent fraud or abuse
- Comply with legal obligations
If you are in the EU/EEA, we process your personal data under the following legal bases (GDPR Article 6): performance of a contract (creating your account and providing the Service, processing payments); our legitimate interests (security, fraud prevention, and improving the Service); compliance with legal obligations; and your consent (for optional analytics cookies, requested through the cookie banner). These mirror the KVKK legal bases set out in the Turkish section below.
4. Information Sharing
We do not sell your personal information. We share it only with the service providers listed below, only to the extent each one needs to do its job, and we may disclose it where the law requires it.
Service providers we share data with
This is the complete list. Each entry says what the provider does for us and exactly what it receives.
- Google LLC (USA) — three separate roles. Sign-in with Google: receives nothing from us; we receive your email, name and profile picture. Google Play billing (Android app): the purchase token we send back to Google to verify your plan. Google AdMob (Android app, Free plan only): your device’s advertising ID.
- DeepSeek (China) — powers the optional AI assistant. Receives the text of your request and the parts of your project needed to answer it, and only when you actually use the assistant. Your email address and name are not sent.
- Polar Software Inc. (USA) — processes payments made on the website. Receives your email address and the billing details you enter at checkout. Card data goes directly to Polar and never reaches our servers.
- Resend Inc. (USA) — sends transactional email (verification, password reset, support replies). Receives your email address and username.
- Cloudflare, Inc. (USA) — content delivery and protection against attacks. All traffic to the Service passes through it, so it sees your IP address, browser information and request metadata.
- Map and font providers (OpenStreetMap, CARTO, ArcGIS Online, Google Fonts, flagcdn) — serve map tiles, fonts and flag images that your browser loads directly, so your IP address and browser information are visible to them.
Analytics is deliberately not on this list: we run our own Umami instance on our own servers and that data is never sent to a third party (Section 6).
Other disclosures
- Legal Requirements: When required by law or to protect our rights
- Business Transfers: In connection with a merger, sale, or acquisition
5. Google OAuth
If you sign in using Google OAuth, we receive:
- Your Google account email address
- Your public profile information (name, profile picture)
- A unique Google ID for authentication
We do not access your Google account beyond this basic information and do not store your Google password.
6. Cookies, Analytics and Advertising
We use a small number of cookies, grouped into two categories:
Essential cookies (always on)
- session: A signed Flask session cookie that keeps you signed in while you use the Service. HTTPOnly, SameSite=Lax.
- remember_token: Optional long-lived cookie set only when you tick “Remember me” on sign-in, so you don’t have to log in again on the same device.
Essential cookies are required for the Service to function and cannot be turned off.
Anonymous analytics
We use a self-hosted instance of Umami to count pageviews and a small set of aggregate events (sign-up, video render, subscribe intent, feedback sent). Umami does not set cookies, does not collect personal data, and the data never leaves our servers. No third-party analytics is loaded on the website.
If we add anything in the future that does require consent, it will only load after you grant it through the cookie banner. You can review or change your preferences anytime via the Cookie Preferences link in the footer.
Advertising (Android app only)
The website shows no advertising. The AnimateMyMap Android app does, and only on the Free plan:
- A banner shown while you use the editor.
- Optional rewarded ads. You may choose to watch one to unlock a single use of something a paid plan includes — removing the watermark from an export, exporting in HD, or a couple of extra AI messages. Watching is always voluntary and always an alternative to upgrading, never a requirement.
Both are served by Google AdMob. Any paid plan removes advertising entirely.
To serve those ads, AdMob uses your device’s advertising ID — a resettable identifier provided by Android that is not tied to your name or email. Google acts as an independent controller for this data; its handling is described in Google’s Privacy & Terms.
You are in control of it:
- In the European Economic Area, the UK and Switzerland, the app asks for your consent before any personalised advertising, using Google’s certified consent form. You can change your answer at any time from Account → Ad privacy → Privacy options in the app.
- Anywhere, you can reset or delete your advertising ID in Android Settings → Privacy → Ads. If you delete it, you will still see ads, but they will not be personalised.
7. Data Storage and Security
We implement appropriate security measures to protect your information:
- Passwords are encrypted using industry-standard hashing
- Data transmission is encrypted using SSL/TLS
- Regular security audits and updates
- Limited employee access to personal data
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Your Video Content
We keep your 10 most recent rendered videos on our servers so you can download them again. When you render an eleventh, the oldest file is deleted automatically. We do not store your videos permanently, and we delete every one of them when you delete your account.
After a video file is removed we keep only metadata about it (such as date and resolution), not the video content itself. You retain all rights to your content, and we do not use it for any purpose other than providing the Service to you.
9. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. You may request account deletion at any time, after which we will delete your data within 30 days, except where retention is required by law.
10. Your Rights
You have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete data
- Deletion: Request deletion of your account and data
- Export: Download your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at contact@animatemymap.com
11. Children's Privacy
AnimateMyMap is not intended for users under 13 years of age (or the minimum age of digital consent in your country, where that age is higher), consistent with our Terms of Service. We do not knowingly collect personal information from children below that age. If you become aware that a child has provided us with personal information, please contact us and we will delete it.
12. International Users and Data Transfers
AnimateMyMap is operated from the Republic of Türkiye and these matters are governed by Turkish law. All of the third-party providers we rely on (email delivery, authentication, payments, the AI assistant, advertising, content delivery, fonts and map tiles — the full list is in Section 4) are located outside Türkiye, so your information is transferred to and processed in other countries. The specific providers and the legal bases for these transfers are listed in the KVKK section below (Section 14, "International Transfers"). Where data is transferred internationally, we rely on appropriate legal bases and safeguards.
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Your continued use after changes indicates acceptance of the updated policy.
14. Additional Disclosures for Turkish Users (KVKK)
This section addresses the disclosure obligation under Article 10 of Turkish Law No. 6698 on the Protection of Personal Data ("KVKK") for users located in Türkiye. It should be read together with the English sections above.
14.1 Data Controller
The data controller responsible for processing your personal data is İsmail Ergün, a sole proprietor operating under the name AnimateMyMap, registered with the M. Karagüzel Tax Office, Ankara, Türkiye.
Address: Araplar Mahallesi, Şehit Yaver Turan Cad. No: 14 B, İç Kapı No: 94, Mamak / Ankara, Türkiye
You can send any questions or requests regarding this notice to contact@animatemymap.com.
14.2 Categories of Personal Data Processed
- Identity: username
- Contact: email address
- Customer Transaction: account creation, sign-in, password changes, your projects, the videos you create (the 10 most recent are kept; older files are deleted automatically) and their metadata (date, resolution, etc.)
- Visual: your Google profile picture, if you choose to sign in with Google; images you upload to your projects
- Transaction Security: password hash value, IP address, browser information, session cookies
- Financial: when you take out a paid subscription or buy a pass, payment details are collected directly by the payment provider (Polar on the website, Google Play in the Android app); card data is never transmitted to our servers. We keep only the record that a purchase happened, which plan it was for, and when it ends.
- Marketing: in the Android app only, your device’s advertising ID, used by Google AdMob to show ads to users on the Free plan (see Section 6)
14.3 Method of Collection and Legal Basis
Your personal data is collected electronically: directly from you through the registration form, via Google OAuth, and automatically while you use the Service (session, logs). Under KVKK Article 5, processing relies on the following legal bases:
- Art. 5/2(c) establishment or performance of a contract: creating your account and providing the Service
- Art. 5/2(ç) compliance with a legal obligation: retention required by law, responding to requests
- Art. 5/2(f) legitimate interest: security, fraud prevention, service improvement, and showing non-personalised advertising in the Android app to users on the Free plan
- Art. 5/1 explicit consent: personalised advertising in the Android app (collected through Google’s certified consent form, and withdrawable at any time from Account → Ad privacy), and any optional analytics cookies added in the future, obtained through the cookie banner
14.4 Purposes of Processing
- Creating and managing your account
- Authentication and account security
- Providing the Service (map animation, video creation)
- Sending transactional emails (email verification, password reset)
- Taking payment for paid plans and keeping your plan status up to date
- Running the optional AI assistant when you use it
- Showing advertising in the Android app to users on the Free plan
- Complying with legal obligations and responding to legal requests
- Improving the Service and detecting errors
14.5 International Transfers (KVKK Art. 9)
To operate the Service we use the third-party providers listed below, which are located outside Türkiye, so your personal data is transferred abroad. Following the amendments to KVKK Article 9 (in force since 1 June 2024), where there is no adequacy decision for the destination country (there is currently none for the USA), such transfers are made on the basis of the appropriate safeguards provided for in Article 9, namely the standard contract published by the Turkish Data Protection Authority (the Board). Because these transfers are regular and systematic rather than incidental, we do not rely on the occasional exceptions (such as explicit consent or performance of a contract) as the primary basis.
The providers we transfer data to are:
- Resend Inc. (USA): sending transactional emails such as verification and password reset. Data transferred: email address and username.
- Google LLC (USA): three separate purposes. Sign-in with Google: authentication, email, name, profile picture. Google Play billing (Android app): the purchase token we verify to activate your plan. Google AdMob (Android app, Free plan): your device’s advertising ID.
- DeepSeek (China): powers the optional AI assistant. Data transferred: the text of your request and the parts of your project needed to answer it. This happens only when you use the AI assistant; your email address and name are not sent. China has no adequacy decision from the Board, so this transfer relies on the same appropriate-safeguards route described above.
- Polar Software Inc. (USA): processes payments made on the website. Data transferred: email address and the billing details you enter at checkout. Card data goes directly to Polar and never reaches our servers.
- Cloudflare, Inc. (USA): content delivery and protection against attacks. All traffic to the Service passes through it, so IP address, browser information and request metadata are visible to it.
- Google Fonts (CDN): your browser may connect to Google servers to load fonts, during which your IP address and browser information may be visible.
- Map tile providers (OpenStreetMap, CARTO, ArcGIS Online, flagcdn): your browser connects directly to these servers for map tiles and flag images, during which your IP address may be visible.
14.6 Data Subject Rights (KVKK Art. 11)
As a data subject, under KVKK Article 11 you have the right to:
- Learn whether your personal data is being processed
- Request information if your personal data has been processed
- Learn the purpose of processing and whether your data is used in line with that purpose
- Know the third parties to whom your data is transferred, domestically or abroad
- Request correction of incomplete or inaccurate data
- Request erasure or destruction of your data within the conditions set out in the KVKK
- Request that any correction, erasure, or destruction be notified to third parties to whom your data was transferred
- Object to a result against you arising from the exclusively automated analysis of your data
- Request compensation if you suffer damage due to unlawful processing of your data
You can delete your account entirely at any time via Account → Delete account. You can send other rights requests to contact@animatemymap.com; your requests will be resolved within 30 days at the latest.
14.7 Retention Period
Your personal data is retained for as long as your account is active and for as long as needed to provide the Service. If you delete your account, your data is removed from our systems within 30 days at the latest, except where retention is required by law.
14.8 Cookies
The cookies used on our site fall into two categories:
- Essential cookies (always on):
session to maintain your session and the optional remember_token.
- Optional cookies (require explicit consent): there are currently no analytics or marketing cookies on the website. If any are added in the future, they will load only after you grant explicit consent through the cookie banner.
The Android app does not use cookies for advertising; it uses the device advertising ID instead, which is covered in Section 6 and in 14.2 above.
You can manage your preferences at any time via the Cookie Preferences link in the footer.
15. Contact Us
For questions or concerns about this Privacy Policy, contact us at:
Email: contact@animatemymap.com