The short version
Restroom Critic doesn't ask who you are. You can use it without an account, and creating one is optional. If you create an account, the only personal thing we store is the email address (and, with Google sign-in, the name) you sign in with. There are no ads, no analytics, and no trackers. Your location is used only to search for restrooms near you, and the things we store are the ratings, votes, notes, and restrooms you choose to submit.
Who we are
Restroom Critic is a crowd-sourced guide to public restrooms, available at restroomcritic.app. This policy covers the Restroom Critic mobile app and this website. Questions or requests: privacy@restroomcritic.app.
What we collect
A random anonymous ID. The first time the app needs to save something you submit, it creates a random identifier for your device. This ID is what your contributions are tied to. It contains nothing about you, and we can't connect it to a person.
Your location, while you use the app. If you grant location permission, the app uses your device's location to center the map and to ask our server "what restrooms are near this point?" The coordinates are used to answer that search and to sort results by distance. We don't keep a history of where you've been, and your location is never attached to your ID. Location permission is optional. You can deny it and browse the map by panning instead.
What you contribute. Ratings, yes/no facts and votes, short notes, "still accurate" confirmations, problem reports, and restrooms you add (including the restroom's position on the map). These are stored with your ID and a timestamp. The public parts (scores, facts, notes) are shown to other users without any identifier at all.
An email address, only if you sign in. Signing in is optional; it unlocks contributing more (adding restrooms, writing notes, rating more often). If you sign in with an email code, we store that email address. If you use "Continue with Google", Google gives us the name and email on your Google account, per the consent screen Google shows you. We use this only to sign you in and to keep your contributions attached to your account, never for marketing, and we never show it to other users.
What we don't collect
- No name or email unless you choose to sign in, and no phone number, ever
- No contacts, photos, or files from your device
- No advertising, and no advertising ID
- No analytics or usage tracking
- No location history
How we use it
Only to run the app: showing nearby restrooms, displaying crowd-sourced scores and facts, and keeping the guide honest. The anonymous ID lets us apply fair-use limits (for example, one rating per restroom per day) and act on spam or abuse reports. We don't use your data for advertising or profiling, and we don't sell it or share it with data brokers. Ever.
Services we rely on
Supabase hosts our database and handles sign-in, both the anonymous kind and optional accounts. Your contributions, your ID, and (if you sign in) your email live on their servers, and like any web service they briefly process standard connection details (such as your IP address) to deliver responses. Sign-in code emails are delivered through our email provider. See the Supabase privacy policy.
Google sign-in is optional. If you use it, Google shares your account's name and email address with us, and Google's own privacy policy covers what Google does on its side.
OpenFreeMap serves the map tiles you see. When the map loads, your device requests tiles directly from their servers, which, like any web request, exposes your IP address and the map area being viewed. OpenFreeMap states that it does not log or track users; see openfreemap.org.
How long we keep it
Contributions are the point of a crowd-sourced guide, so they're kept for as long as they're useful. If you never signed in: uninstalling the app or clearing its data discards the anonymous ID on your device, and nothing that remains on our servers can be traced back to you. If you have an account, we keep it (and its email) until you delete it, see deleting your account.
Your choices
- You can use the app without granting location permission, and revoke it anytime in your device settings.
- You can use the app without ever submitting anything and without ever signing in.
- You can delete your account from inside the app (Settings → Account → Delete account) or by following the steps at restroomcritic.app/delete-account.html.
Children
Restroom Critic is not directed at children under 13, and since we collect no personal information, we have no way to knowingly collect any from a child. If you believe a child has submitted something they shouldn't have, contact us and we'll remove it.
Changes to this policy
If the app starts doing something new with data, we'll update this page first and change the date at the top. Meaningful changes will also be noted in the app's release notes. (August 2026: added optional sign-in, exactly the kind of change this paragraph was written for.)