Privacy Policy

Last updated: October 17, 2026

Stormap.ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you visit our website.

Information We Collect

• Usage Data: We automatically collect information about how you interact with our site, including pages visited, time spent, and referring URLs, via analytics tools.
• Cookies: We use cookies to improve site functionality and analyze traffic. You can disable cookies in your browser settings.
• Contact Information: If you contact us via email or our contact form, we collect your name and email address to respond to your inquiry.

How We Use Your Information

• To operate and improve Stormap.ai
• To analyze site traffic and user behavior (via Google Analytics)
• To respond to your inquiries
• To display relevant advertisements (via Google AdSense)

Third-Party Services

We use Google Analytics and Google AdSense. These services may collect data as described in Google's Privacy Policy. You can opt out of Google Analytics via the Google Analytics opt-out browser add-on.

Data Retention

We do not store personal data beyond what is necessary to respond to inquiries. Analytics data is retained per Google Analytics' default retention settings.

Your Rights

You have the right to request access to, correction of, or deletion of any personal data we hold about you. Contact us at hello@stormap.ai.

MCP Server and API

This section covers the Stormap MCP server (https://stormap.ai/mcp), the REST API and pay-per-call (x402) endpoints used by AI agents and developers.

• What the tools look up: public information only (company websites, package registries, SEC filings, DNS and domain records, public web pages). Tools never return personal data about individuals.
• What we log for each call: the tool name, time, result status and duration; the thing looked up, shortened (a domain, ticker, package or search phrase; for email checks only the email's domain, never the full address); the client name and user agent; and a one-way hash of the caller's IP address, never the address itself.
• Paid calls: for pay-per-call requests we record the paying wallet's public address. Payments are settled by the x402 facilitator on the Base network; we never receive private keys or card details from agents.
• API keys: optional, and stored only as hashes.
• Signing in: you can sign in with Google, GitHub or a one-time link sent to your email. We store your email address and name, and for GitHub your username and account ID. Sign-in emails are sent through our email provider (Resend) and contain only the sign-in link; we don't send marketing email without your consent.
• Report links: some tool results include a report_url, a readable copy of that result at stormap.ai/r/<id>. These pages hold only the result of a lookup of public information, are not listed or indexed by search engines, and are deleted after 90 days.
• Idea Bubbles: your maps are saved only in your own browser. If you choose "Publish to gallery", the map's topic and ideas become a public page; links, email addresses and phone numbers are removed, the text is checked by an automated moderation service (OpenAI), and we keep a one-way hash of your IP address to limit publishing. To remove a published map, contact us.
• Retention: call logs are deleted automatically after 90 days. Aggregate daily counts (for example, calls per tool) contain no identifiers.
• Use: logs are used only to run and improve the service, prevent abuse and enforce free-tier limits. We do not sell this data or use it to train AI models.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

Contact

Questions? Email us at hello@stormap.ai.