Privacy
Last updated 2026-09-07. Operated by an individual, not a company. Questions: privacy@satspots.com. The operator is a private individual who does not publish their name and address here, for personal safety: this service is publicly associated with bitcoin. They are identified to our hosting and payment providers, and their identity is given to any competent authority, court, or person with a legitimate legal claim, on request to the address above.
SatSpots keeps as little about you as it can while still working. There is no advertising, there are no tracking cookies, nothing is sold or shared for marketing, and the visitor statistics contain no identifiers at all.
If you only browse the map
Nothing identifying you is stored. We count visits as a daily number per page, and views, direction requests and website clicks as a daily number per listing. We also keep a daily count of the words typed into the site's search box, so we can see what this directory is missing, and a daily count per website that sent visitors here, keeping only that site's name and never the page somebody was reading. Search terms containing an at sign are discarded rather than counted, because that is the one shape in which an address tends to reach a search box by accident. Those counters carry no cookie, no identifier and no IP address, so they cannot be traced back to a person, not even by us.
Two things do involve your device, and you should know about both. Map tiles are loaded from OpenFreeMap, so that service necessarily sees your IP address as it would for any image you load from another site; we send it nothing else about you. And when you press the button to find places near you, your browser asks for your permission and the coordinates stay on your device: they are used to centre the map and sort the list, and are never sent to us or stored.
If you send a confirmation, a closure report or a correction
We store what you wrote and, to stop the same submission arriving a hundred times, a one-way HMAC hash of your IP address. It is a hash and not an address: it cannot be turned back into your IP, and it is used only to recognise repeats and to tell two people apart from one person reporting twice. That hash is erased after 180 days, which is the point at which it has stopped affecting anything we publish; what you wrote stays, because by then it is a fact about a shop and no longer about you.
If you have a business account
We store your email address, because it is how you sign in and the only way to reach you. Sign-in links are stored as hashes rather than as usable links, they expire in fifteen minutes, they work once, and expired ones are deleted. Sessions expire both after inactivity and absolutely.
When you claim a listing we store which listing, the role address we sent the verification code to, a hash of that code, and how many attempts were made. When you edit your profile we store what you chose to publish: description, opening hours, website, payment methods, categories, photo links, social links and any offers. That content is public by design, because publishing it is the point.
Your statistics are counts, not visitors: how many people saw your listing on a given day, not who they were. We could not tell you who visited even if you asked.
If you subscribe to a paid plan
Payment is handled by Stripe. Card details are entered on Stripe's own pages and never reach our servers; we store your Stripe customer and subscription identifiers, the plan, its status and the current period end, which is what tells the site whether your plan is active.
Who else processes it
Render hosts the site and the database. Resend delivers our emails, so it sees the address a sign-in link is sent to. Stripe processes payments, if you subscribe. OpenFreeMap serves the base map tiles your browser requests directly. Where any of this involves processing outside the European Economic Area, it is covered by the standard contractual clauses in our agreements with those providers.
Nothing is sold, rented or shared for advertising or profiling. There is no advertising network on this site, and no analytics product from anyone else.
How long we keep it
Expired sign-in links are deleted. The anti-duplication hash on a report is erased after 180 days. Statistics are aggregates from the start and are kept indefinitely because they identify nobody, and so are the reports themselves once that hash is gone, because what remains is a statement about a shop. Your account and everything attached to it live until you delete them, and the deletion is immediate and real, not a flag.
What you can ask for
If you have an account you can export everything we hold about you, in a machine-readable file, from your account page, and you can delete your account from the same place. Deleting cancels any subscription. You can also write to privacy@satspots.com to ask for access, correction, deletion, a copy, or to object to processing, and you may complain to your national data protection authority.
The legal grounds are simple: performing the service you asked for, when you have an account, and our legitimate interest in a working, non-abusive site for the anti-duplication hash and the aggregate counters.
The map data itself
Listings come from OpenStreetMap contributors via BTC Map, under the Open Database Licence. That data is public and was published there, not here. If a listing about your business is wrong, you can correct it at the source or claim it here, and if you believe a listing should not exist at all, write to us and we will deal with it.