This Privacy Policy describes how The Endless Collective LLC ("WellPlaced," "we," "us," or "our") collects, uses, and protects information when you use the WellPlaced website and service (the "Service"). We aim to collect as little personal data as possible.
| Category | What & why |
|---|---|
| Account email | If you sign in, we store your email address so we can send you magic sign-in links and identify your subscription. We do not store passwords. |
| Subscription metadata | If you subscribe to PRO, we store your subscription status, plan, and the customer/transaction IDs returned by Paddle so we know whether to grant PRO access. We do not store card numbers, CVCs, or full billing addresses — Paddle handles all of that. |
| Usage logs | Cloudflare (our hosting provider) automatically records standard server logs (IP address, user-agent, requested URL, response status, timestamp). We use these for security, abuse prevention, and debugging. Logs are retained for up to 30 days. |
| Saved preferences | Your starred cities, theme choice, lens preference, and view mode are stored in your browser's localStorage (not on our servers) unless you sign in. |
We do not use third-party analytics trackers, advertising cookies, behavioural advertising, or marketing pixels.
We share data only with the third-party services we need to operate WellPlaced:
| Provider | Purpose | Data shared |
|---|---|---|
| Cloudflare, Inc. | Hosting, edge compute, KV storage, DDoS protection | All site traffic (incl. IP, user-agent), account & subscription state |
| Paddle.com Market Limited | Merchant of record — payments, tax, invoicing | Email, name, billing address, payment method (collected by Paddle directly, not us) |
| Resend, Inc. | Transactional email delivery (sign-in links, receipts) | Email address |
| Institutional and public-data sources — including Open-Meteo, OpenAQ, IQAir, World Bank, Eurostat, ITU, UNODC, OECD, WHO, Yale EPI, GeoNames, Ookla / Speedtest, OurAirports, OAG, GDELT, ACLED, Global Peace Index, World Happiness Report, QS World University Rankings, and others | Public-data sources; we fetch their data, not the other way around | None — these are read-only public datasets and APIs |
We do not sell, rent, or trade your personal data with anyone for marketing purposes.
We do not use third-party tracking cookies.
WellPlaced is operated from the United States. Cloudflare's edge network and Paddle process data globally. By using the Service you consent to the transfer and processing of your information in the United States and other jurisdictions where our service providers operate. Where applicable, our providers use standard contractual clauses or equivalent safeguards for cross-border transfers.
Depending on where you live, you may have rights to access, correct, delete, port, or restrict the processing of your personal data, including under the EU/UK GDPR and California Consumer Privacy Act (CCPA/CPRA). To exercise any of these rights, email wellplacedlive@proton.me from the email address associated with your account. We will respond within 30 days.
You also have the right to lodge a complaint with your local data-protection authority.
WellPlaced is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We use industry-standard measures to protect your data, including TLS encryption in transit, hashed/encrypted credentials, principle-of-least-privilege access, and isolation of payment data via our merchant of record. No system is perfectly secure; we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. The "Last updated" date above reflects the most recent change. Material changes will be communicated by email to subscribers and a notice on the Service.
Privacy questions or rights requests: wellplacedlive@proton.me
The Endless Collective LLC, New York, United States