Privacy Policy
Last updated: 7 February 2026
Big Lap ("we", "us", "our") operates the website big-lap.com.au and associated services. This policy explains how we collect, use, and protect your personal information.
1. Information We Collect
When you create an account, we receive:
- Your email address (required for all accounts)
- Your name (you provide this, or we receive it from Facebook if you use Facebook Login)
- Your profile picture URL (if you use Facebook Login)
- Your Facebook User ID (if you use Facebook Login)
When you add markers to your trip, we store:
- Location coordinates (latitude/longitude)
- Marker title and notes you provide
- Timestamp of when the photo was taken (from EXIF data)
- A thumbnail version of your photo for map display
When you share externally:
- We generate a shareable link to your marker page
- The link includes Open Graph metadata for rich previews
- External platforms (Facebook, Twitter, etc.) may cache preview images
2. How We Use Your Information
- Authentication: To identify you and secure your account
- Service delivery: To display your trip on the map
- Sharing: To generate shareable links when you choose to share your markers
We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties except as described in this policy.
3. Facebook Login
Big Lap offers Facebook as a login option. When you use Facebook Login:
- Facebook receives information about your login activity
- We receive only basic profile information (name, email, profile picture)
- You can revoke Big Lap's access to your Facebook account at any time via Facebook Settings
4. Photo Data and EXIF
When you add a photo, your device extracts location and timestamp data locally. We then:
- Process locally - Your device creates a smaller preview image
- Store the preview - Only the resized version (1200px) is uploaded to our servers
- Keep originals on your device - Full-resolution photos stay on your phone/in your Google Photos
Preview images are stored securely in AWS Sydney region. Original photos never leave your device unless you choose to save them to your gallery.
5. Data Storage and Security
- Your data is stored in Australia (AWS Sydney region)
- All data is encrypted in transit (HTTPS) and at rest
- We use industry-standard security practices
- Access to your data is limited to essential personnel
6. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you
- Delete: Request deletion of your account and all associated data
- Export: Download your data in a portable format
- Withdraw consent: Disconnect Facebook access at any time
Note: If you've shared links to external platforms (Facebook, Twitter, etc.), those posts must be deleted separately on those platforms.
7. Data Retention
- Active accounts: Data retained while your account is active
- Deleted accounts: Data deleted within 30 days of deletion request
- Audit logs: Retained for 7 years for legal compliance
8. Cookies
We use minimal cookies for:
- Authentication (keeping you logged in)
- Essential site functionality
We do not use tracking cookies or third-party analytics.
9. Children's Privacy
Big Lap is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by posting a notice on the website or sending you an email.
11. Contact Us
For privacy inquiries or to exercise your rights:
- Email: admin@big-lap.com.au
- Website: big-lap.com.au
12. Australian Privacy Law
Big Lap complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). If you believe we have breached your privacy, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).