Waywell← Back to the map

Privacy Policy

Last updated: October 29, 2026

This Privacy Policy explains how Waywell (“Waywell,” “we,” “us,” or “our”) handles information when you visit waywellmap.pages.dev or use the community safety awareness map (the “Service”). Waywell is currently operated as an independent project by Paelo Moldes.

Important: Waywell concerns sensitive reports of sexual assault and related safety issues. Do not include names, contact details, exact addresses, or other identifying information in a report. Map locations are approximate and community-submitted; they are not verified incident records or a prediction of personal risk.

1. Information we handle

Community report submissions

When a report is submitted, the app receives the selected latitude and longitude and a confirmation that the submitter is making a report. The server rounds the coordinates to a grid of approximately 0.01 degrees (roughly 1.1 km north–south; east–west distance varies by latitude) before storage. The raw coordinates are not written to the Waywell reports database. The database stores an opaque report identifier, the rounded area key, a creation timestamp, and a status. The current app does not ask for a submitter’s name, email address, or account.

Reports may be displayed as area counts, including for areas with a small number of submissions. Because approximate location and timing can still be sensitive, rounding does not guarantee anonymity. Do not submit details that could identify you or another person.

Technical and connection information

When you connect to the Service, hosting, network, security, and other infrastructure providers may process technical information such as your IP address, request details, browser/device information, timestamps, and security logs as part of delivering and protecting the site. The exact logs and retention periods depend on those providers’ systems and settings; Waywell does not control all of their operational logging.

Approximate location

The map may ask your browser for permission to use device geolocation to center the map. If you decline or it is unavailable, Waywell may request approximate location metadata from Cloudflare based on your connection. This fallback is not GPS and may be inaccurate. You can deny browser location permission in your browser or device settings; the map can still be used manually.

Location searches

If you search for a city, address, landmark, or place, the search text is sent to the OpenStreetMap Nominatim service to find results. Waywell does not store that search text in its own application database, but the search provider and network infrastructure may process it under their own policies. Avoid entering personal or sensitive information in the search box.

2. How information is used

Information is used to:

Waywell does not currently provide user accounts, targeted advertising, or a newsletter through this app. We do not sell personal information. We do not use submitted reports to identify individual survivors.

3. Service providers and disclosures

Waywell relies on third-party services to operate. Depending on how you use the Service, these may include:

These providers may process information under their own privacy terms and in the countries where they operate. Waywell may also disclose information if reasonably necessary to comply with law, respond to valid legal process, protect people from imminent harm, investigate abuse, or protect the Service and its rights. We do not intentionally publish report submitters’ identities.

4. Cookies, storage, and analytics

Waywell uses Cloudflare Web Analytics, which is enabled in the site's Cloudflare dashboard, to understand general website traffic and page performance. Cloudflare describes Web Analytics as privacy-focused and says it does not collect or use visitors' personal data. Its analytics beacon uses browser performance measurements to report aggregate website metrics such as page views and performance. Waywell does not use these analytics to build user profiles or serve targeted advertising.

Waywell does not intentionally set its own advertising cookies. Hosting, security, map, or other third-party services may use necessary technical storage or process connection information to deliver their services. Provider practices and features may change; this policy will be updated if Waywell's use of analytics or other services materially changes.

5. Retention and deletion

Report records may remain in the database for as long as they are needed to operate the map, unless they are removed by the operator or must be retained for a legitimate legal or security reason. The app currently has no automatic deletion schedule for reports. Hosting and security logs are subject to the relevant provider’s retention practices. We aim to review requests to remove or correct information, but we may not be able to identify a particular report from a request alone because the app does not collect submitter identity or retain the raw coordinates.

6. Security and sensitive information

We use reasonable measures available within this project, including HTTPS hosting, server-side validation, rounded coordinates, and hCaptcha checks. No online service or storage system can be guaranteed completely secure. The map may reveal approximate activity in a geographic area, especially where few reports exist. Consider your personal safety before submitting, and do not rely on Waywell as an emergency service or a substitute for professional support.

7. International use and transfers

Waywell is accessible internationally. Service providers may process information in countries other than the country where you are located, including countries with different data-protection rules. Where applicable law requires safeguards for international transfers, we will take steps required of us as the project operator. The privacy rights available to you depend on the laws that apply to your circumstances.

8. Privacy rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, restriction of, or objection to certain processing of your personal information, and to withdraw consent where processing relies on consent. You may also have the right to complain to your local data-protection authority. To make a request, email us using the contact details below and describe the request without sending unnecessary sensitive information. We may ask for proportionate information to understand and respond to the request, while avoiding collection of additional sensitive data wherever possible. Some rights are subject to legal exceptions, and the app’s limited records may constrain what can be retrieved or linked to an individual.

9. Children and minors

Waywell is not designed to collect identifying information from children. Do not submit personal details about a minor or information that could identify a child. If you believe a child’s personal information has been submitted to Waywell, contact us so we can assess the request and take appropriate action.

10. Third-party links and services

The Service may link to or load resources from third parties. Their privacy practices are governed by their own notices, not this policy. We encourage you to review the relevant provider’s privacy information before using those services.

11. Changes to this policy

We may update this policy as Waywell’s features, providers, or legal obligations change. The “Last updated” date at the top indicates when this page was most recently revised. Please review this page periodically, particularly before submitting a report.

12. Contact us

If you have questions about this Privacy Policy or wish to make a privacy request, contact the operator:

Waywell is currently operated as an independent project. For privacy inquiries, please contact us by email. We will review and respond to requests in accordance with applicable law. Please do not include unnecessary sensitive personal information in your message.