Legal
Privacy Policy.
Effective July 20, 2026. TapTheMap is built on a simple principle: your guests deserve a map, not a surveillance profile.
Effective July 20, 2026. TapTheMap is built on a simple principle: your guests deserve a map, not a surveillance profile.
When a guest views your venue map, we collect no personal data. No cookies, no login, no location tracking, no fingerprinting, no accounts. Our analytics count page views in aggregate without identifying anyone. The only time we collect personal information from a guest is if they choose to enter their email address in an optional signup form — and even then, it's just the email, nothing else. That's not a marketing claim — it's how the system is built.
TapTheMap is operated by Technology Assessment Project LLC ("TAP"), an Illinois limited liability company founded by Matt Overeem. Our website is tapthemap.online. If you have a question about privacy or data, contact mattovereem@tapthemap.online — you'll hear back from Matt directly, not a privacy department.
When a guest taps an NFC sticker and views your venue map, we collect no personally identifiable information as part of the map experience. Specifically, the map page does not collect:
The NFC tap itself is entirely local to the guest's phone. It's a one-way read: the phone reads a URL from the sticker. No data flows in the other direction. No information is transmitted from the guest's device to any server during the tap. If the guest dismisses the URL notification without opening it, nothing is sent anywhere — no network request occurs at all.
Put simply: a TapTheMap sticker knows less about your guest than the front door does.
Note: Some venues may enable an optional email signup form on their map page (see Section 5). If a guest chooses to enter their email, that is the only piece of personal data collected — and only because they volunteered it.
We use Plausible Analytics to measure how your venue map is being used. Plausible is a privacy-first analytics platform built and hosted in the European Union. It is designed from the ground up to provide useful site analytics without collecting personal data.
Plausible collects only aggregate, non-identifying data points:
Plausible does not use cookies. It does not store IP addresses. It does not track individual visitors across pages, sessions, or visits. It does not build user profiles. There is no way to identify a specific person from Plausible analytics data — not by us, not by Plausible, not by anyone.
For a detailed technical explanation of how Plausible achieves this, see their data policy at plausible.io/data-policy.
In addition to Plausible, we use Umami, a self-hosted, open-source analytics tool running on our own server (analytics.tapthemap.online) for internal operational monitoring. Like Plausible, Umami is cookieless and does not collect personal data, IP addresses, or device identifiers. Because Umami runs on our US-based server rather than in the EU, we use it for internal operations only — not as the basis for any client-facing analytics or compliance claims.
Aggregate analytics can be provided to you as an additional feature of our service. If included in your plan, you'll have access to a dashboard showing your map's usage patterns — view counts, busiest days, device breakdown, and traffic sources — all without collecting a byte of personal data from your guests. This data can support your annual reporting, board presentations, grant applications, and sustainability metrics.
TapTheMap's analytics infrastructure is designed to comply with the strictest international privacy regulations without requiring cookie consent banners, opt-in dialogs, or data processing agreements with venue operators.
Plausible Analytics is:
For venues that serve international visitors — zoos, museums, convention centers hosting global events — this matters. Your map page is compliant the moment it loads, regardless of where your guest is from.
Some venues choose to enable an optional email signup form on their map page. If you see this form, here is exactly how it works:
If a venue has not enabled this feature, no signup form appears and no email data is collected — the map page remains completely data-free.
When you request a demo or sign up as a client, we collect:
We use this information solely to respond to your inquiry and, if you become a client, to deliver the wayfinding service. We do not sell, share, rent, or trade your information to any third party for any reason.
Demo request forms on our site are processed through Formspree, a third-party form handling service. When you submit a form, here's what happens:
Formspree does not use your submission data for marketing, does not share it with third parties, and does not use it to build advertising profiles. Their full privacy policy is available at formspree.io/legal/privacy-policy.
Here is a complete list of every external and self-hosted service involved in operating TapTheMap:
That's it. There are no other services, scripts, or integrations on any TapTheMap page.
We do not use Google Analytics, Adobe Analytics, Facebook Pixel, Meta tracking, advertising networks, retargeting scripts, social media widgets, embedded video trackers, heatmap tools, session replay services, or any other third-party tracking technology.
TapTheMap does not use cookies. Not first-party, not third-party, not session, not persistent, not functional, not analytical, not advertising. Zero. Our analytics platforms (Plausible and Umami) are both specifically designed to operate without cookies, which is why you don't see a cookie consent banner on our site — there is genuinely nothing to consent to.
To ensure your venue map works even in areas with limited connectivity — underground spaces, thick-walled buildings, rural areas with weak signal — TapTheMap may cache a copy of the venue map, points of interest, and related content on the visitor's device using standard browser caching technology (a "service worker").
This cached data contains only the same public venue content visible to any visitor — no personal information is stored. The visitor can clear this cached data at any time through their browser settings. Venue administrators can also trigger a cache refresh when content is updated.
This is not a cookie and does not enable tracking. It simply means a guest who viewed your map at the entrance can still use it in a basement, a tunnel, or anywhere else their phone loses signal.
Here's how long we keep different types of data:
Venue operators: You can request access to, correction of, or deletion of any personal information we hold about you at any time. Just email mattovereem@tapthemap.online.
Visitors who signed up for email updates: You can unsubscribe from any venue's emails using the unsubscribe link in every message. You can also request deletion of your email address by contacting the venue directly or by emailing mattovereem@tapthemap.online. We will remove your email within 10 business days.
For visitors who did not sign up for email updates: no personal data was collected during your visit. There is nothing to access, correct, or delete.
TapTheMap does not knowingly collect any information from children under 13 (or under 16 in EU/UK jurisdictions). The map experience itself collects no personal data from any visitor of any age.
The optional email signup form does not ask for age and is intended for adults. If we learn that a child under 13 has submitted an email address, we will delete it promptly. Parents or guardians who believe a child has signed up can contact us at mattovereem@tapthemap.online.
If we update this policy, we'll post the changes here with an updated effective date and give 30 days' notice. For material changes — anything that affects what data we collect or how we handle it — we'll email venue operators directly. If we ever start collecting data we don't currently collect, you'll know about it before it happens.
For privacy questions, data requests, or anything else related to how we handle information, contact Matt Overeem at mattovereem@tapthemap.online or (224) 217-7494.
If your venue uses TapTheMap, you can tell your guests — and your board, your donors, and your compliance officer — that your wayfinding system collects no personal data from visitors during the map experience. No cookies, no tracking, no accounts, no consent banners. If you enable the optional email signup, the only data collected is what the visitor chooses to give. Your privacy policy can reference ours. Your sustainability report can cite the data. And if a guest ever asks "does this sticker track me?" your staff can honestly say no.