Concept guide

What is GDPR?

Signed-out or otherwise unresolved visits can still be routed through the visit-level privacy prompt, but once you are signed in the saved account settings win for that page load and the prompt no longer becomes the long-term source of truth.

Account preferences and consent-required visits

Signed-in users can save an Experience and privacy mode on the account page. Latest and Greatest is the recommended default and allows browser-side third parties when the current visit permits them. No 3rd Parties is the stricter path: it keeps browser-side third parties off and makes LocationNotes rely on hosted maps only.

Signed-in users can also save a preferred map source. Google Maps first and OpenStreetMap first are preferences, not promises. If the preferred provider is unavailable, the site falls back to the other allowed provider. If the visit needs consent and that consent has not been granted yet, or the request came from a private-network or otherwise unresolved IP, LocationNotes forces the stricter hosted-maps path for that visit.

The visit-level privacy prompt is mainly for signed-out or otherwise unresolved visits. If someone later creates an account after making that visit-level choice, the first account setup can start from it once. After sign-in, the saved account settings become the durable source of truth and signed-in pages use those saved settings instead of reopening the visit prompt every time.

Your choices

Latest and Greatest is the recommended default. No 3rd Parties avoids browser-side third parties and keeps hosted maps only. Google Maps first and OpenStreetMap first are preferences rather than promises, so LocationNotes can fall back to the other allowed provider or to hosted maps when the stricter privacy rule applies.

When third-party maps are allowed, a live map can request resources from Google Maps or OpenStreetMap based on the current preferred map source. If browser-side third-party calls are blocked because the user chose No 3rd Parties or a consent-required visit has not granted consent, LocationNotes falls back to same-origin hosted map tiles at /maps/tiles/{z}/{x}/{y}.png so the browser stays on LocationNotes-owned URLs.

If the effective experience mode is No 3rd Parties, or the visit is in a consent-required region without granted consent, LocationNotes keeps analytics essential-only and does not load the Google Analytics browser tag for that request.

Privacy options

The visit-level privacy prompt is mainly for signed-out or otherwise unresolved visits.

Add ?GDPR=true to this page if you want to reopen the visit-level privacy prompt while signed out.

Privacy options Privacy

Related pages