Privacy Policy

Last updated: 22 July 2026

DropTop Maps helps you plan when to put your convertible's roof up or down on a drive. This policy explains what personal data we collect, why, and what control you have over it.

Template notice: this policy describes what the app actually does today, but it has not been reviewed by a solicitor. Before promoting the service publicly you should have it checked, and fill in the data controller contact details below.

Who is responsible for your data

The data controller for DropTop Maps is [YOUR NAME OR COMPANY], contactable at [YOUR CONTACT EMAIL]. As we are based in Ireland, this service is governed by the EU General Data Protection Regulation (GDPR).

What we collect

Your email address — when you create an account or sign in with Google. Used to identify your account.
How many drives you have planned this month — a simple counter, so we can apply the free monthly allowance.
Marketing consent — if you tick the box to hear about premium, we record that choice and when you made it.

We do not keep a history of the routes you plan. Start and destination addresses are used to build your plan and are not stored against your account afterwards.

Location

If you tap "Use my current location", your browser shares your coordinates with the app to use as a starting point. This happens only when you tap that button, is used solely for that plan, and is not stored.

Why we're allowed to hold it (legal basis)

Contract — your email and drive count are needed to provide the service and enforce the free allowance.
Consent — marketing emails are sent only if you actively opt in. You can withdraw consent at any time.

Who else processes it

Google (Firebase) — authentication, hosting and database. Data is stored in the EU multi-region.
Google Maps Platform — receives the addresses you enter in order to geocode them and find nearby stops.
Open-Meteo, OpenStreetMap/OSRM — receive route coordinates to return weather and road data. They receive no information about who you are.

We do not sell your data, and we do not use it for advertising.

How long we keep it

Your account data is kept while your account exists. Monthly drive counts are kept for the current and preceding months. If you delete your account, everything is removed immediately.

Your rights

Under GDPR you can request access to, correction of, or erasure of your data, object to processing, or ask for a copy of it. You can also complain to the Irish Data Protection Commission.

Deleting your data is immediate and self-service: sign in and use "Delete my account and data" at the bottom of the page. This wipes your account, your drive counts and any marketing consent record.

Cookies

We don't use tracking or advertising cookies. Firebase Authentication stores a sign-in token in your browser so you stay signed in — this is strictly necessary for the service to work.

Changes

If this policy changes materially we'll update the date above and, where the change affects you, let you know in the app.