Privacy notice

Updated 10 October 2026. LocateKit is operated by Martin Pavlič in Slovakia. For privacy questions or requests, use the contact page or email info@locatekit.com. Every request is answered within two working days.

Live location

Sharing starts only after you choose to start and grant browser location permission. The tool sends latitude, longitude and the browser's accuracy estimate to our server. We store the latest point, session identifiers, hashed access tokens and expiry information in Cloudflare D1. Updates replace the stored point; this feature does not build a route history and cannot locate a phone from a phone number or IMEI.

Anyone with your complete viewer link can view that session, including someone to whom a recipient forwards the link. Sessions last 15, 30 or 60 minutes. Expired sessions are no longer available through the viewer. Stopping sharing sends a deletion request. Physical cleanup of expired records depends on the cleanup task; expiry is not a promise that all infrastructure copies disappear at that instant.

Radius map

The radius calculation runs in your browser. A link you copy includes the map coordinates and radius in the URL. Those parameters can appear in browser history and hosting logs. Anyone receiving the link can read them. Do not share a point you want to keep private. The map measures straight-line distance only.

Photo metadata

The photo cleaner reads the selected file in your browser and creates a new image without the embedded metadata it can remove. The tool does not upload your photo to LocateKit. Your original file stays unchanged on your device. A cleaned image can still reveal a location through visible landmarks, signs or text in the picture itself.

Hosting and maps

Cloudflare hosts the site and processes network information such as IP addresses and request metadata for delivery and security. Map pages request map tiles from Esri; those tile requests identify the map area being viewed and expose network information to that provider. These are external services, not local-only calculations.

Contact messages

If you submit the contact form, its name, email address, topic and message are processed to deliver and answer your request. Delivery uses Resend and the receiving mailbox. Do not include passwords, access tokens or someone else's precise location. Contact us if you want a message removed; any applicable retention obligations may affect the response.

Advertising and analytics

Advertising scripts remain disabled. Public pages use Google Tag Manager to load Google Analytics 4 and Microsoft Clarity for traffic measurement and understanding how visitors use the site. These providers receive page and device information and may use analytics cookies; Clarity can also collect interactions and session recordings. Analytics is excluded from pages marked private or noindex, including live-location sharing and viewing, the radius map and photo metadata tools. See our browser-storage notice. A browser location permission is permission to run the sharing feature you started, not permission to use the data for advertising.

Your choices and rights

You can decline location access, stop a share or allow it to expire. Depending on applicable law, you may request access, correction, deletion, restriction or portability of your personal data, or object to processing. Contact the operator to make a request or ask about a particular processing activity. You may also raise a complaint with the relevant data-protection authority.