Privacy policy
We do not require an account and we do not sell personal data. Preferences such as your chosen random mode stay in your own browser, and so do the three things we keep that are not preferences: a list of which cameras you have opened, so the site can show you how many you have seen and Random Camera can avoid the ones you saw most recently; the places you have said you have been, whether you marked them on a camera or typed them into the Journey page, so the globe can show them back to you; and β if you have used the Jet Lag Planner β the last few plans it made, so you can open them again on the plane. None of it is ever sent anywhere, none of it is tied to anything that identifies you, and clearing your browser data removes all of it.
We also keep daily totals of how the site is used β how often Random Camera, the layers, full screen, its next button and the share button are pressed, which cameras are opened, which sites the outbound links lead to, and how many visits reach a second, fifth or tenth press of Random Camera, or a first, fifth or twentieth camera in Watch mode. These are counts per day with nothing attached to them: no identifier, no address, no cookie, nothing stored in your browser, and nothing that could tell one visitor from another. They are kept for about a year.
Embedded players are loaded from their providers, who may set their own cookies. We use the privacy-enhanced YouTube embed domain where available.
Your location history
Journey replays your own Google Maps Timeline export as a film. The file is read by a worker running on the page, in your browser, and neither it nor anything derived from it is ever sent to this site or to anyone else. There is no upload, because there is nowhere for it to go: this site is a set of static files with no server that could receive one.
While that page is open your browser fetches map tiles, elevation data and three small files of its own β borders, place names and the camera list. Those hosts see your IP address, as any site you visit does, and none of them is told anything about where you have been.
Trips you add by hand, and places you mark as visited, are kept in your browser's local storage. A video you record is made in your browser and saved by you. You can save your places to a file at any time, which is yours and goes wherever you put it.
You can also ask this site to keep a copy of those places so they reach your other devices. If you do, they are encrypted in your browser first, with a key this site never receives. What is stored is an identifier that is a hash, a block of ciphertext, and the time it last changed β no account, no email address, no name, and nothing that joins one stored copy to another or to you. We cannot read it, and neither can anyone who obtains it from us. The key is the code shown when you set it up, or the passkey on your own device; lose both and what is stored stays unreadable for ever, including to us. You can delete it from the same panel, which removes the row outright, and anything untouched for two years is deleted anyway.
Before sharing one, the film can hide the places you are found most often β that dense scribble around one point is an address, and it is the most identifying thing in the export.