Privacy Policy

Last updated 26 September 2026

The short version

This service collects as little personal data as it can. The only personal data it asks for is what an account needs: a name, an email address and a password. There is no analytics, no error-reporting telemetry, no advertising and no tracking. Nothing is sold, and nothing is shared with anyone for their own purposes.

If you would rather provide nothing at all, use Continue as Guest on the sign-in page. A guest session still creates a temporary database record, for the reasons set out below, but you are never asked for an email address or a password.

Who is responsible

wwv.knappelectricquestioner.com is an independently operated installation of WorldWideView, run by Tonal Domination Studio, LLC("the operator"), who is the data controller. WorldWideView is self-hosted software: the project that publishes it does not host this instance, does not receive its data, and is not a processor for it.

Privacy questions and requests go to legal@tonaldominationstudio.com. Only the operator can action them.

What is collected

Registered accounts

Data	Why it exists
Name and email address	Identifying the account and signing in
A one-way hash of your password	Verifying sign-in. The password itself is never stored and cannot be recovered from the hash.
Role, and whether the account is suspended	Access control
Created and last-updated timestamps	Administration
Session records, and API keys if you create any	Keeping you signed in; authenticating programmatic access
Your layer settings and favourites	Restoring your view between visits

Your email address is not used for marketing. There is no mailing list.

Guest sessions

Choosing Continue as Guestsigns you in without asking for anything. To be straightforward about what that does: the software still creates a real but temporary account record, because favourites, settings and layer access all work through an account. That record holds a randomly generated identifier, a placeholder email address the software invents for itself, the display name "Guest", and timestamps. You provide none of it.

Guest records are deleted automatically once their session has expired. Sessions last seven days.

Cookies and local storage

A session cookie is set when you sign in, including as a guest. It is strictly necessary for the service to function and is not used for advertising or cross-site tracking. Some interface preferences — a collapsed panel, a chosen tab — are kept in your browser's local storage and never leave your device.

There are no third-party cookies.

Server logs

The web server records ordinary request information, which can include IP addresses, request paths, timestamps and error details. This keeps the service running and secure. Retention follows the hosting platform's defaults rather than a period set by the operator, and these logs are not used to build any profile of you.

What is not collected

No analytics or page-view tracking.
No third-party error-reporting or crash telemetry.
No advertising and no advertising identifiers. Advertising exists only in the project's separate public demo edition, which is not this instance.
No location data beyond the map view you choose to look at, which is not recorded.
Nothing is sold, shared or disclosed for anyone else's purposes.

Map and layer data

The layers drawn on the globe come from third-party public sources — OpenStreetMap, satellite catalogues, aviation and maritime feeds, government camera and hazard feeds, and similar.

Some layers are fetched by the server and cached, so the provider sees only the server.
Others, including map imagery and terrain, are requested by your browser directly from the provider. Those providers can therefore see your IP address and request details, exactly as if you had visited their own website. Their privacy practices are their own.
Searching for a place sends the text you type to a geocoding service so it can be turned into coordinates.

Surveillance-infrastructure layers are derived from OpenStreetMap and licensed under the Open Database Licence. That data describes fixed equipment in public view, contributed by volunteers, and contains no information about individuals.

Why this processing is lawful (UK and EEA)

For visitors in the United Kingdom or European Economic Area, the operator relies on:

Contract— account data and the session cookie, which are necessary to provide the service you asked for.
Legitimate interests— server logs, for security and keeping the service running. The interest is operating the service safely; the data is minimal and is never used to profile anyone.

No processing relies on consent, because nothing optional is collected. There is no automated decision-making and no profiling.

How long data is kept

Registered accounts— until you delete the account or ask the operator to, after which the record and everything attached to it is removed.
Guest records— removed automatically once the session expires, which is seven days.
Cached layer data— transient, expiring automatically within hours or days. It contains no personal data.
Server logs— per the hosting platform's defaults.

Your rights

United Kingdom and European Economic Area

Under the UK GDPR and EU GDPR you have the right to:

be told what personal data is held about you, and receive a copy;
have inaccurate data corrected;
have your data erased;
restrict or object to processing;
receive your data in a portable format;
complain to your supervisory authority — in the UK, the Information Commissioner's Office.

California

Under the CCPA, as amended by the CPRA, you have the right to:

know what personal information is collected, and why;
request access to it, or a copy;
request its deletion or correction;
not be discriminated against for exercising these rights.

The operator does not sell personal information and does not share it for cross-context behavioural advertising, so there is nothing to opt out of. No sensitive personal information is collected.

Making a request

Email legal@tonaldominationstudio.com. The operator will reply within the period the applicable law requires, and may need to confirm that you control the account in question before acting. Requests are free.

Children

Accounts are for people aged 13 or over. If you are in the UK or EEA and under 16, you need a parent or guardian's authorisation. The service is not directed at children, and no data is knowingly collected from anyone under 13. If you believe a child under 13 has created an account, contact legal@tonaldominationstudio.com and it will be deleted.

Security

Traffic is served over HTTPS. Passwords are stored only as one-way hashes. Access to the server and database is restricted to the operator. No system is perfectly secure, so please use a unique password, and tell the operator promptly if you think your account has been compromised.

Where data is held

Account data is held on the server the operator runs, in that server's location. Because some map and layer providers are contacted directly by your browser, those requests may reach infrastructure in other countries — the same as visiting any international website.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes affecting registered accounts will be notified by email where the operator holds an address for you.