Privacy

PostFinder is a directory of post offices, parcel lockers and posting boxes. Reading it requires no account and we would rather not know who you are.

What we do not do

There is no analytics on this site. No Google Analytics, no tag manager, no advertising network, no pixel, no session recording and no third party script that watches you read. Nothing profiles you, and there is nothing to opt out of. That is also why you have not been shown a cookie banner: we do not set the kind of cookie that needs one.

What your browser stores

A few preferences are kept in your browser's own storage and never sent to us: whether you chose the light or dark theme, whether you dismissed the note about another country, and the Mastodon server you last shared from. Clearing your site data removes them and costs you nothing but those choices.

What our servers see

The ordinary things a web server cannot avoid: your IP address, the page you asked for, your browser's user agent and the time. Traffic reaches us through Cloudflare, which sits in front of the site, terminates the connection and tells us which country a request came from so the page can offer the right one. We use that country for nothing else and do not store it against you.

If you write to us

The contact form asks for a name, an email address and a message, and sends them to us as an email through Resend, which delivers it and keeps it only as long as delivery needs. The form is protected by Cloudflare Turnstile, which decides whether the sender is a person. We keep what you send for as long as it takes to answer you and to keep a record of the correction if you told us something on the site was wrong.

If you review a place or add a photo

Everything a visitor adds is checked by a person before it appears on a page, and a review or photo we decline is never shown. The forms are protected by Cloudflare Turnstile, which decides whether the sender is a person.

A review needs no account. It keeps what you wrote, the name you gave or one we made up for you, and the time. A reviewer cookie remembers the name on this browser so your next review carries the same one; it lasts a year and holds nothing else. To stop the same address sending hundreds of reviews, we keep a hash of your IP address rather than the address itself, made with a key that changes every day, so it cannot be matched to you or across days.

A photo needs an account, because it is credited. It shows your handle if you set one, or "a PostFinder contributor" if you did not, and never your email address. Before a photo is stored we make a fresh copy of the picture alone, so the camera's details and any GPS location in the file are removed. Waiting photos are kept privately and seen only by the person checking them; a photo we decline is deleted.

If you suggest a fix, it needs no account either. It keeps what you said should change, the same daily hash of your address, and an email address only if you gave one so we can ask a question. That email is never published and is deleted when the fix is decided, whichever way it goes.

If you add a missing place, the same is true: no account, what you told us about the place and where you put the pin, the daily hash of your address, and an optional email that is deleted once the place is decided. If you used your location, the position is only the place's; we do not keep where you were standing apart from it.

If you have an account

Nothing on this site needs an account to read. Where one exists it stores your email address and a hash of your password, never the password itself, and sets a session cookie so you stay signed in. That cookie is strictly necessary: without it there is no way to know the account is yours.

PostFinder takes no payments and has nothing to sell you. There is no subscription, no card on file and no payment processor in the picture, so there is no billing data to keep or to lose.

Asking us to delete something

Write to postmaster [at] postfinder.io and ask, or use the contact form. We will delete an account and everything attached to it, or tell you why we cannot, within a reasonable time and at no cost. You do not need to give a reason.

Data about places, not people

Almost everything on this site is a fact about a building: where a post office is, when it opens, when a box is emptied. That comes from the sources we credit, not from anyone who visits. If a page shows a phone number or an address that belongs to you and should not be here, write to us and we will take it down.