Privacy Policy

Last updated: 18 September 2026

This policy covers the WifiMapper website and the WifiMapper Android app. It explains what we collect, why, how long we keep it, and what you can ask us to do with it. If anything here is unclear, get in touch and we will explain it.

Who we are

WifiMapper is operated by Industrial Software Solutions. You can reach us about anything in this policy through the Contact option inside the site once you are signed in, or by replying to any email we send you.

What we collect

Account information

When you create an account we store your email address (which is also your username), your first and last name, and a cryptographic hash of your password. We never store your password itself and cannot recover it - a forgotten password is reset, not retrieved.

WiFi scan samples

When you scan with the WifiMapper app, each reading is uploaded to your account and stored with:

• the network name (SSID) and the access point's hardware address (BSSID);
• the channel centre frequency and the signal strength measured by your device;
• the advertised security protocol (for example WPA2 or WPA3);
• the GPS position of your device when the reading was taken;
• the date and time of the reading, and which account uploaded it.

These samples describe WiFi networks your device could hear and the places you took readings from. They therefore record your location at the times you were scanning. Only scan where you are comfortable having that recorded.

WifiMapper reads only what WiFi access points broadcast publicly. It does not join the networks it maps, does not ask for or store their passwords, and never sees any traffic passing over them.

Payment information

Paid subscriptions are handled by Stripe. Card numbers are entered on Stripe's own pages and never reach our servers. We store only the identifiers Stripe gives us to link your account to your subscription, along with its current status.

Messages you send us

If you use the contact form, we receive the subject, the message and the email address of the account that sent it, so we can reply.

Technical information

Our servers keep ordinary web logs (such as IP address, browser type and the pages requested) for security and troubleshooting. The site sets cookies that are needed to keep you signed in and to protect forms against cross-site request forgery, and it remembers your colour theme in your browser's local storage. We do not use advertising cookies, and we do not run third-party analytics or tracking scripts.

Why we use it

• To give you an account and keep you signed in.
• To store your WiFi samples and draw them on your map - the service itself.
• To apply your plan's access point limit and, for paid plans, to bill you.
• To reply to messages you send us.
• To keep the service secure, working and free of abuse.

We do not sell your personal information, and we do not use your WiFi samples for advertising.

Who else sees it

We share data only with the service providers that make WifiMapper work:

• Stripe - payment processing and subscription management.
• Postmark - sending transactional email such as password resets and invitations.
• Our hosting provider - running the servers and database the service sits on.
• Map tiles - the map page loads background map imagery from an external tile provider, which by necessity receives requests for the map area you are viewing.

We may also disclose information where the law requires it, or where it is necessary to protect our rights, our users or the security of the service.

Who can see your WiFi samples

Your uploaded samples are scoped to your account. Other WifiMapper users cannot see them. Administrators of the WifiMapper service can access stored data where needed to operate and support the service.

How long we keep it

Account details and WiFi samples are kept while your account is open. Delete your account and its personal details and uploaded samples are removed, other than anything we must retain for legal or accounting reasons - billing records in particular are kept as long as tax rules require. Web logs are kept only as long as they are useful for security and troubleshooting.

Your choices

• Access - ask for a copy of the personal information we hold about you.
• Correction - update your name or email, or ask us to correct anything that is wrong.
• Deletion - ask us to delete your account and the samples uploaded under it.
• Stop collecting - revoke the app's location permission or uninstall it, and no further samples are recorded.
• Complaints - contact us first, and you may also complain to your local data protection authority (in New Zealand, the Office of the Privacy Commissioner).

Security

Traffic to the site is encrypted in transit with HTTPS, passwords are stored only as salted hashes, and access to the production database is restricted. No system is perfectly secure, but we take reasonable steps to protect your data and will tell affected users about any breach that puts them at risk.

Children

WifiMapper is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will remove it.

International transfers

Our service providers may process data in countries other than your own. Where that happens, we rely on those providers' own safeguards for international transfers.

Changes to this policy

If we change this policy we will update the date at the top of this page, and we will tell account holders directly about any change that materially affects them.