Private by default. Shared only if you choose. Never sold, never mined, never advertised against. That's the whole policy in one breath — the rest is just the details.
Just you — every pin starts private, visible only to you when you're signed in. If you flip a pin to "Members", other signed-in members can see that pin. Visitors who aren't signed in can never see member pins. You can flip a pin back to private, or delete it, any time.
Your data is stored in Canada, on Supabase (our database provider, in their ca-central-1 region), and the website itself is hosted on a server in Canada run by OVH. We name our providers because you deserve to know who touches the pipes: Supabase processes the data under our instruction and their own strict security practices; they don't get to use your logbook for anything.
Any time, no email chain required: export your logbook (ask us and we'll hand you every row), or delete your account and everything in it. Deletion is real deletion — your pins, photos, profile and account are removed from the live database. Email ben@lobbylamp.com and it's done within 7 days, usually faster.
If this policy ever changes, the date below changes and the summary at the top gets rewritten first. We will never quietly loosen it.
Last updated: 6 September 2026 · questions: ben@lobbylamp.com