GeoClip Privacy Policy

 

GEOCLIP · SURVEYOR’S TOOLKIT

YOUR PROJECTS. YOUR CHOICE.

GeoClip privacy policy

Last updated: 8 November 2026. Applies to GeoClip – Surveyor’s Toolkit, version 1.0.2.

01 · PRIVACY

Data used for your tools

GeoClip uses the coordinates, geometry, project names, descriptions, notes, inspection records, attributes and photos you enter or import to provide coordinate conversion, maps, measurements, project organisation, import/export and reports. Projects, attachments, saved project settings and the active project selection are encrypted locally in this browser’s IndexedDB. Your privacy/map choice is saved unencrypted in Chrome local storage. The storage permission is used for this local choice and for moving older preferences into encrypted storage. GeoClip does not use Chrome Sync for this data.

02 · PRIVACY

Optional external maps

External basemaps are disabled until you explicitly enable them in the in-product disclosure. Enabling them requests map tiles over HTTPS from Esri at server.arcgisonline.com. Esri receives your IP address, requested tile coordinates and zoom (revealing the viewed geographic area), and ordinary HTTP request metadata. When the map is fitted to a project, tile requests may reveal the project’s geographic area. GeoClip does not upload your project records, notes or photos to Esri. Esri and its infrastructure may process request data according to their own policies: Esri privacy overview: https://www.esri.com/en-us/privacy/overview.

Choose local tools only to decline external basemaps. Drawing geometry, local projects, conversion, measurements and import/export remain available without basemap imagery. Change or revoke your choice using Privacy / map settings in the workspace. Revocation stops further basemap use in open GeoClip workspaces; it cannot recall requests already sent or remove records held by Esri. Network requests already in flight may finish.

03 · PRIVACY

Exports and clipboard

Files are imported only when you select them. Downloads, backups, clipboard copies and printable reports are generated at your request; the resulting data leaves GeoClip’s storage and is under your control. Exported and backup files are not encrypted by GeoClip. Browser or operating-system print destinations may have their own data handling.

04 · PRIVACY

Optional donations

Donations are voluntary and do not unlock features. Choosing a PayPal amount opens the configured Donateandwin payment link on paypal.com in a new tab. PayPal receives the selected amount and ordinary request information and handles any payment details you choose to enter under its own terms and privacy policy. Easypaisa support displays the recipient’s account details and optionally copies the account number; you initiate and confirm any transfer in your own app. GeoClip never processes payments or collects card numbers, bank credentials or payment confirmations. It does not record donation clicks, donation amounts or whether you donated.

05 · PRIVACY

No analytics, ads or sale of data

GeoClip includes no analytics or advertising. It does not sell user data, use data for personalised advertising, or provide the developer with remote access to local projects. User data is used only for the described surveying and project tools. The external map requests described above are the transfer needed for the optional basemap feature; donations are separate, user-initiated interactions with payment providers.

06 · PRIVACY

Retention, deletion and security

Local projects and photos remain until you delete them, clear extension/browser data or uninstall GeoClip. Delete a project using Project manager to remove that project and its associated attachments. Delete individual attachments through the project tools. Clearing extension data also removes preferences and your privacy choice. GeoClip cannot delete exported files, clipboard history, backups or records held by external providers.

GeoClip encrypts saved project records, names, notes, geometry, measurements, inspection information, attributes, photos/attachments and saved project settings using AES-256-GCM with a fresh random 96-bit IV per record. A local passphrase derives a non-extractable key using PBKDF2-SHA-256 with a random 256-bit salt and 600,000 iterations. GeoClip saves the public salt, encryption parameters and encrypted verification data, but does not save the passphrase or encryption key in durable storage or send them to a server. Record types, ciphertext sizes, record counts and vault-format metadata are not concealed.

Each popup/workspace must be unlocked separately. Keys are held only in that window’s memory; closing or reloading it and browser restart require unlocking again. Use Lock all GeoClip windows to lock other open views too. A window inactive for 15 minutes triggers the same lock. There is no online account, password reset or recovery key. If you forget your passphrase you cannot unlock your saved data. Keep the passphrase safely outside GeoClip. Your passphrase does not encrypt downloaded/exported files, backups, clipboard history, printouts or data handled by payment providers.

When you first set a passphrase, older local projects, measurements and attachments are encrypted before their plaintext database records are cleared in one transaction. If that transaction fails, the originals are retained; GeoClip does not silently reset data. Older Chrome/local-storage preferences are removed after the encrypted transaction commits; if that separate cleanup fails or is interrupted, GeoClip retries it before allowing unlock. Historical browser/OS backups, storage remnants, caches and files previously exported cannot be securely erased by GeoClip.

GeoClip uses HTTPS for configured external maps and PayPal links. Encryption does not protect an already-unlocked window, a compromised browser/device, screen capture, memory inspection, malicious software or a weak/guessable passphrase. Protection also depends on your browser, device account and operating-system security. No independent security audit or guarantee against all attacks is claimed.

07 · PRIVACY

Changes and questions

Material changes in data handling require an updated disclosure and renewed choice before the changed handling begins. Developer: Ehtisham Riaz. Public support and privacy contact: injoyplus@gmail.com.

Comments

Popular posts from this blog

Welcome to GeoClip