Last updated: September 24, 2026
Prefer the plain-language version? See How it works and privacy, which lists what happens to your photo and how to check it yourself.
GeoTag.world ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and photo geotagging services.
Your photos are never uploaded to our servers. GeoTag.world reads, edits, and removes photo metadata (GPS, EXIF) in your web browser, on your own device. The image file stays with you. This means:
If you create an account, we store your email address and sign-in details with our database and authentication provider, Supabase. You can sign in with an email address or with Google. When you sign in with Google, we receive your email address and name from your Google account through Supabase, and we use your name to greet you in emails. We also store your credit balance and how many credits you have used, and, if you buy anything, records of your purchases (such as the number of credits, amount, currency, and status) and your subscription status.
When you are signed in and look up a photo, we may save a history entry in Supabase containing the file name, the GPS coordinates read from the photo, the address looked up for those coordinates, the camera name, and the date the photo was taken. Only this extracted metadata is saved, never the image itself. You can delete saved entries from your history.
Payments are processed by Polar, which acts as our payment provider. When you check out, your email address and a reference to your account are sent to Polar. We do not see or store your card details.
If you subscribe to our newsletter, we store your email address in a Supabase table for newsletter subscribers.
When you search for a place, the text you type is sent to Geoapify to return matching locations. When a photo's coordinates are turned into an address, those coordinates (not the photo) are sent to Geoapify. Geoapify also receives your IP address, as any service you connect to does. The interactive map loads map tiles from OpenFreeMap, which receives your IP address and the map area you view, as any map tile host does.
We use Google Analytics on every visit, whatever you choose in the cookie banner, to understand how visitors use our website. This helps us improve our services. If you accept all cookies, we also use Google Tag Manager and Microsoft Clarity (a Microsoft/Bing service). These tools may collect:
Each analytics event carries a random device ID and session ID, and your account ID when you are signed in. Accepting all cookies also turns on advertising measurement signals in Google's tools. Microsoft Clarity may record how you interact with pages, including session replay.
If you choose "Essential only" in the cookie banner, Google Analytics still runs, but Google Tag Manager, Microsoft Clarity, the Bing tag and advertising measurement signals are not loaded.
If you submit feedback through our feedback form, we collect the information you voluntarily provide, which may include your email address and message content, together with your browser's user agent, the page you were on, and a timestamp. When you answer the question shown when you press download, your account email is attached automatically. The feedback form requires an email address. The message, email, browser details (user agent), the page you were on and the time are forwarded to our feedback service. Feedback is forwarded to a third-party feedback service, hosted on Heroku (feeder-node-1337), which stores it for us.
Our website is hosted on Vercel, which processes standard server and connection data (such as IP address and request logs) to deliver the site.
We use cookies and similar technologies for:
Google Analytics runs from your first visit, so its random device ID and session ID are stored in your browser before you choose in the cookie banner. Tag Manager, Clarity, the Bing tag and advertising measurement signals stay off until you choose "Accept all". You can also control cookies through your browser settings.
Besides cookies, the site keeps some information in your browser storage. It stays on your device and is not sent to our servers, except for the saved result described below:
You can clear the recent work list with "Clear history", manage saved places with "Manage" in the app, or clear everything by clearing this site's data in your browser.
We use the collected information to:
If you create an account, we use your email address to send:
Every email except purchase confirmations has an unsubscribe link, and unsubscribing takes effect straight away. You can also reply to any of our emails and ask us to stop. We send email through Resend, our email provider, which delivers these messages.
We record whether an email was delivered, bounced or marked as spam. When email tracking is switched on, we also record whether it was opened or clicked, through our email provider. We choose some emails based on your account activity (credits used, last sign-in and purchases). We record when you close the price screen without buying and when you first use a credit, and use those records to choose emails. To decide which email suits you, we look at the domain of your address (for example, whether it is a work, school or free-mail domain). Unsubscribes and spam complaints are honoured: your address is added to a list of addresses we do not email.
We do not sell your personal information. We share data only with the service providers needed to run GeoTag.world:
These providers have their own privacy policies governing their use of data.
Because your photos are never uploaded to us, there are no image files for us to retain. Account data, credit and purchase records, and saved results are kept while your account exists; you can delete individual saved results from your history and deactivate your account from the account page. Deactivating your account cancels any active subscription at the end of the billing period, marks the account as deactivated and signs you out, and we stop sending you follow-up emails. Your data is kept unless you ask us to delete it: email hello@geotag.world. We keep a log of emails we decided to send you (for each one: your address, the kind of email, its status of pending, sent, failed or held out, any error text, the email provider's email id, whether you were in the test or the holdout group, and the date) and a list of addresses that unsubscribed, so we can honour it. We have not set an automatic deletion period for either yet. Newsletter emails are kept until you unsubscribe. Analytics data is retained according to the default retention periods of Google Analytics and Microsoft Clarity. Feedback submissions are kept by the feedback service only as long as necessary to respond to your inquiry.
Depending on your location, you may have the following rights:
To exercise these rights, please contact us using the information below.
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.
We implement appropriate technical and organizational measures to protect the information we collect. However, no method of transmission over the internet is 100% secure.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
If you have any questions about this Privacy Policy, please contact us through our website feedback form or visit our Support section.