Privacy Policy

When you create an account you provide your email address, username, and password. You may optionally provide a display name, profile photo, and bio. If you register for the FLUSH token whitelist you provide your Solana wallet address. If you contact us you provide your name and email.

When you post a review you provide a star rating (1–5), venue name (optional), facility information (adult changing station, family bathroom, gender-neutral availability), and optionally a photo taken with your device camera or chosen from your gallery. Reviews are public and associated with your username.

When you use the "Find toilets near me" feature or submit a review, your device may share your GPS coordinates with us. By enabling location services and submitting a review, you consent to your GPS coordinates being used in the following ways: • Linking your review to a toilet pin on the map • Contributing to our global aggregate location database • Improving the accuracy of toilet locations worldwide GPS data submitted with reviews is associated with the toilet location — not your personal identity — in our public database. It is used to build a community-powered global map of public restrooms. Do not submit location data for a toilet you do not want appearing on our publicly accessible, globally aggregated map. If you wish to submit a review without location data, you may deny location permission and submit without GPS. We do not track your movement, store your location history, or collect location data when you are not actively using a feature that requires it.

Photos you upload are stored in our Supabase cloud storage. Photos submitted from mobile devices (including via the Toilet Book flip phone interface) are uploaded to our "bathroom-pics" storage bucket and associated with your review. Photos are public — do not upload images you do not want publicly visible. Our AI moderation system checks every uploaded photo to verify it depicts a bathroom.

We automatically collect your device type, browser user agent string, operating system, and IP address. We use this to optimise the experience for your device — for example, detecting flip phones (including the Orbic Journey V RC2200L and similar devices) to serve a lightweight interface. We also collect page views, feature usage, and referral sources to understand how the platform is used.

If you register for the FLUSH token whitelist, you provide your Solana wallet address. This is stored securely in your profile and used solely for distributing FLUSH tokens on the token launch date (August 28, 2026). We never ask for your private key or seed phrase. Never share your seed phrase with anyone — not us, not anyone.

We use browser local storage to maintain your login session on the Toilet Book flip phone interface. We use session storage to maintain your admin session. We do not use third-party advertising cookies. The Toilet Book PWA (Progressive Web App) uses a service worker to cache pages for offline use — this stores copies of page content on your device and can be cleared by uninstalling the PWA.

We use the information we collect to: • Operate and improve the Toilet Book platform • Display your reviews and ratings on the public map and feed • Aggregate GPS data from reviews into our global toilet location database • Detect your device type to serve the appropriate interface (standard web app or lightweight flip phone UI) • Send transactional emails (account confirmation, password reset) • Moderate content for community standards compliance • Distribute FLUSH tokens to whitelisted wallet addresses on launch day • Detect and prevent abuse, fraud, and policy violations • Improve search engine discoverability of community-reported locations • Analyse usage patterns to improve features We do not use your information for advertising, do not build advertising profiles, and do not share your personal data with advertisers.

The following information is public and visible to all visitors of toilet-book.com, without requiring an account: • Your reviews including star rating, venue name, facility badges, and any photo • Your username (but not your email address) • The GPS-derived location pin associated with your review • Your FLUSH token balance rank on leaderboards (username and balance only) Do not post reviews, photos, or location data that you do not want publicly visible globally.

Toilet Book maintains a global database of public restroom locations built from community submissions, OpenStreetMap data, and GPS data submitted with reviews. This database is used to power our public map at toilet-book.com/map. By submitting a review with location enabled, you explicitly consent to your GPS coordinates being processed into this global aggregate database. The toilet pin location derived from your GPS coordinates will be publicly visible on our worldwide map and may be accessible via our API to third parties building on our data. If you submit a review at a location you consider private or sensitive, do so without enabling location permission.

If your venue is listed under our Spotlight or Verified programme, your venue name, address, and facility information is publicly listed and may appear in search engine results. Business contact information provided to us for verification is not publicly displayed but is retained for account management purposes.

We use the following third-party services to operate Toilet Book: • Supabase — database, authentication, and file storage (supabase.com) • Vercel — hosting and deployment (vercel.com) • OpenStreetMap — base map tile data (openstreetmap.org) • Nominatim — address geocoding from GPS coordinates (nominatim.openstreetmap.org) • Cloudflare — DNS and performance (cloudflare.com) • Anthropic Claude API — AI photo moderation (anthropic.com) • Solana blockchain — FLUSH token distribution (post-launch) • Raydium DEX — FLUSH token liquidity (post-launch) Each of these services has its own privacy policy. We encourage you to review them. We do not control how these third parties process data once it leaves our systems.

Toilet Book does not sell, rent, or trade your personal information to any third party for commercial purposes. Claude products are ad-free. We do not allow advertisers to access your data or target you based on your activity on our platform. The global aggregate toilet location database we build from community GPS submissions may be made available to developers and researchers building accessibility tools, travel apps, or public health infrastructure. This data is location-based and does not include personal identifiers.

Account data: retained while your account is active. You may request deletion at any time. Reviews and ratings: retained indefinitely as part of the community database. If you delete your account, your reviews are anonymised (username replaced with "deleted user") and the content remains as part of the public record. Photos: deleted from storage within 30 days of account deletion upon request. GPS-derived toilet pins: retained indefinitely as part of the aggregate map database. Individual GPS submissions are disassociated from your account on deletion. Solana wallet address: deleted from your profile on account deletion. Token distributions already made to your wallet cannot be reversed. Server logs including IP addresses: retained for 90 days for security purposes. To request data deletion, email toiletbookmain@gmail.com with subject "Data Deletion Request".

Toilet Book is available as a Progressive Web App (PWA) that can be installed on your home screen. When installed, a service worker caches the following on your device for offline access: the homepage, map page, and points page. No personal data is stored in the service worker cache — only page HTML and assets. Your login session is stored in your browser's local storage. Clearing your browser data or uninstalling the PWA removes all locally stored data. The flip phone interface (accessible at toilet-book.com/flip.html) stores your login session in local storage to persist between visits on devices where session storage resets on browser close.

Toilet Book is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at toiletbookmain@gmail.com and we will delete it promptly.

Depending on your location you may have the following rights regarding your personal data: • Access: request a copy of the personal data we hold about you • Correction: request correction of inaccurate data • Deletion: request deletion of your account and associated personal data • Portability: request your data in a machine-readable format • Objection: object to processing of your data in certain circumstances • Withdrawal of consent: withdraw location consent by disabling location permission in your browser or device settings at any time To exercise any of these rights, contact us at toiletbookmain@gmail.com. We will respond within 30 days.

We use industry-standard security measures including encrypted connections (HTTPS), Supabase row-level security policies, and hashed password storage. We do not store payment card data — all payments for Spotlight and Verified listings are handled externally. No system is perfectly secure. If you discover a security vulnerability please report it to toiletbookmain@gmail.com rather than publicly disclosing it.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users and/or a prominent notice on the site. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Toilet Book after a policy update constitutes acceptance of the updated policy.

For any privacy-related questions, data requests, or concerns: Email: toiletbookmain@gmail.com Website: toilet-book.com/contact