Privacy

Last updated 25 October 2026. This covers the jengmap website (jengmap.com) and the jengmap apps for iPhone and Android. jengmap is a solo, student-led project, not an official CUHK map. Core map features do not require an account. The sections below explain data used by advertising, hosting and the optional Meet service.

Kept on your device

• Favourite places and your last recent searches, stored as place IDs (not what you typed), plus any names you give your favourites.
• The trip you are planning, for the current tab only. If you start from your location, that start is saved as a fixed map point, never as a location history.
• Small settings: language, whether you have seen the tutorial, a service notice or the 夾時間 intro, whether you closed the "Add to Home Screen" hint, and your usage-count choice.
• Correction reports you draft. They are sent only if you choose to email them.

Clearing this site's data in your browser, or deleting the app, removes this local data. It does not delete shared Meet groups stored on the server.

Your location

With your permission, your location is used on your device to show where you are, which way you are facing and which bus stop you have reached. It is not sent to jengmap or stored as a history. A shared route link contains the start and destination you chose, never live location.

Usage counts

The website counts page visits and loading speed with Cloudflare Web Analytics, which uses no cookies. Only plain visits to the home page are counted: links that carry a route, a search or a shared code are never measured. Do Not Track and Global Privacy Control turn counting off, and you can switch it off in About → Usage & privacy. See Cloudflare's Web Analytics privacy details.

The website also keeps its own daily totals on jengmap's server at Cloudflare, so the owner can see what is useful (for example on Information Day). It adds up how often each feature is used (such as the Info Day button, starring an activity or saving the timetable, and whether the S.H. Ho College guide was opened from its link or from inside jengmap), which public places and Info Day activities are picked as a destination or opened, and which kind of route is chosen (walk or shuttle, fastest or flattest, wheelchair on or off), together with the Hong Kong hour, your language and whether you are on a phone or a computer. Whether you used search is counted only as yes or no. These are totals: nothing is tied to you or your device, and there is no cookie, user ID or tracking from one visit to the next. Your location, GPS position, start point, search words, route start and end pairs, IP address and browser details are never part of it, and the place a route starts from is never counted. Totals are kept for up to 400 days. Summary totals may be shown publicly (for example in the Info Day 2026 recap at jengmap.com/infoday/2026/), but never individual records, and never a figure small enough to point to a person. The iPhone and Android apps do not send these counts. Do Not Track, Global Privacy Control and the switch in About → Usage & privacy turn them off.

About also shows how many people are using jengmap right now, how many visits there have been today and in total. While a tab is open and visible it sends a random number made in that tab's memory, every two minutes and with nothing else. The number is never stored on your device or tied to you, the server forgets it five minutes after the last one, and only the daily and all-time totals are kept. Visitors with Do Not Track, Global Privacy Control or the usage switch turned off, and the iPhone and Android apps, send nothing and are not counted, but can still see the numbers.

Ads in the apps

The iPhone and Android apps show small, labelled Google AdMob banners in a few places: under the bus times, below your favourites and recent searches when you choose a destination, and after the route options. They never appear over the map, on the first screen or while you are walking a route. Only non-personalised ads are requested: jengmap does not ask to track you across apps and does not send your trips, searches or GPS coordinates to Google. To show and count ads, Google's ad service receives technical details such as app and device identifiers (including an advertising identifier where available), IP address (which gives a rough region), device and app information, and whether an ad was seen or tapped. See how Google uses information from apps that use its services. Ads start only when Google's consent system allows requests. Where a privacy choice is required, you can reopen it under About → Ad privacy choices. You can also manage advertising identifiers in your phone's settings.

The website (jengmap.com) may show ads served by Google AdSense. Google and its partners use cookies or similar technologies to serve and measure these ads, which can include ads based on your visits to this and other websites. You can turn off personalised advertising in Google Ads Settings, and learn more in how Google uses cookies in advertising. Where the law requires it, a consent choice is shown before any ad cookies are used. jengmap does not give Google your routes, searches or location.

Meet (夾時間)

The optional Meet tab embeds meet.jengmap.com. To share availability, it stores your group name and settings, display name, busy times and, if you keep sharing enabled, class names, types and rooms. Group and member identifiers and hashed editing keys support access and editing. Anyone with a group link can view its shared information, so share links carefully. Timetable screenshot recognition happens on your device; the image is not uploaded.

Meet uses Vercel hosting and Upstash storage. Groups expire after 30 days without a visit or update. You can delete your own member entry using its editing key; a group manager can remove members or delete the group. Meet uses page-kind analytics and loading-speed measurements without sending group links to analytics. Hosting providers process technical request information, and temporary hashed IP identifiers help limit abuse. See the Meet privacy notice for retention, access controls and service-provider details.

Hosting and links

jengmap.com is served by Cloudflare. Like any web host, it processes technical request details such as your IP address and browser type to deliver pages. The apps download the latest shuttle timetable from jengmap.com. Cards marked "From jengmap" and links to other sites (official sources and Threads) are plain links: tapping a card only adds one to the anonymous totals described under Usage counts, jengmap tracks nothing on the other site, and that site's own privacy policy applies once you open it.

Optional website thank-yous

The website’s optional clicker game stores progress and pending tap batches in this browser tab’s session storage. The shared counter stores each batch’s random receipt and tap count to avoid counting retries twice. Tab progress is cleared when the tab session ends. No email, name, GPS or route is stored with it. IP addresses are used briefly for rate limiting, not saved in the counter database. This counts taps, not unique people; game bonus points do not increase the shared total. Payment-provider content loads only if you choose to open it, and that provider handles payment details under its own privacy policy. The optional wallet illustration receives signed support and refund notifications through our Cloudflare service. Notifications can contain donor names, email addresses, messages and payment amounts; our code discards those fields without storing or logging them. It keeps only a hashed payment reference and refund status to prevent duplicate updates and handle refunds. The public response contains an illustration state, not payment records or donor details. These minimal records are kept while the wallet feature operates.

Android beta sign-up

If you ask to join the Android beta at jengmap.com/beta, the email address you type is saved, with the time you sent it, in a Cloudflare database that only the jengmap owner can read. The owner is also sent a private Telegram message with that address, so it can be added quickly; Telegram keeps that message under its own privacy policy. The address is used only to add you to the Google Play test list (Google then handles it under its own privacy policy) and to email you once you are added. Apart from Google and Telegram as described, it is not shared with anyone else or used for anything else, and it is deleted when the beta ends (the owner deletes the Telegram messages then too), or sooner if you ask. No IP address, device details or location is saved with it; your IP address is only used for a moment to slow down repeated requests. The iPhone beta uses Apple's TestFlight link and needs nothing from you here. To have your address removed, email leoc@link.cuhk.edu.hk.

Problem reports

About → Report a problem lets you send a note to the person who makes jengmap. It is one-way: there is no reply and no email address is asked for. Your description (up to 1,000 characters) and, if you add one, a name and whether you are happy to be thanked by name in the update notes are sent with a few facts about your visit, listed on the form before you send: the app version and build, your language, whether the 2D or 3D map is in use, your browser family (such as Safari or Chrome, not the full browser string) and your screen size. Only if you tick the second box is your current route included, as public place IDs and the travel mode; a start taken from your location is sent only as “map point”, never as coordinates. Your location, searches and saved places are never sent. The jengmap server checks the report and forwards it as a private Telegram message to the owner; it does not store the report or log what you wrote. Telegram keeps that message under its own privacy policy until the owner deletes it. Repeated sending from one device is slowed down with short-lived counters that hold no report text. The separate “Email a correction instead” option only opens an email draft in your own email app, and nothing is sent unless you send it.

Contact

Questions or corrections: leoc@link.cuhk.edu.hk.

私隱