Privacy notice

This notice explains how Shit Go Where collects, uses and protects personal data, in line with Singapore's Personal Data Protection Act 2012 (PDPA).

You can browse without an account

Finding toilets, viewing details and getting directions never require signing in. Your location is used in your browser to search nearby and is sent to our server only as part of that search. We don't keep a history of where you searched.

Checking in or reporting without an account

If you check in or report a toilet's status without signing in, we set a cookie (sgw_anon) holding a random device ID (no name, email or location) for up to a year, so we can limit abuse and give you the points when you sign in; we store only your distance from the toilet, never your location, and the cookie is removed once you sign in.

What we store when you sign in

• From Google: your email address, name and profile picture URL.
• The handle you choose, your points, badges and leaderboard choice (off by default).
• What you contribute: toilets and edits you submit (with the position you were standing at when submitting), reviews, photos, status reports, votes and flags.
• Check-ins keep only the distance between you and the toilet and which toilet it was. Your coordinates are used once to verify you are within 150 m and are then discarded.
• A session cookie (sgw_session) so you stay signed in. We don't use advertising cookies.

Usage analytics

To learn which parts of the app help people and where they give up, we use PostHog, hosted in the European Union. It records which pages you open and a few actions: starting a walk to a toilet, arriving, sharing, checking in, reporting, reviewing, adding and voting, and signing in. It also records how you found us when a link says so (for example “from Reddit”).

• Events are tied to a random ID kept in your browser's storage, or to your account ID once you sign in. Never your email, name, coordinates or IP-based location, and we strip location from page addresses before anything is sent.
• No session recordings, no heatmaps and no advertising use.
• If your browser sends Do Not Track or Global Privacy Control, analytics doesn't load at all. Clearing your site data resets the random ID.
• Separately, when someone starts walking to a toilet we add one to that toilet's count for the day. Only the count is kept, not who it was, so we can tell contributors how many people their toilets helped.

Telegram bot

Our Telegram bot finds toilets and takes check-ins and status reports, like the app. You don't need an account to use it. Messages to the bot pass through Telegram, under Telegram's own privacy policy.

• What we keep for each chat: the Telegram chat ID, whether it is a private chat or a group, the filters you saved, when the chat was started and last used, and, if you connect it on Me, the ID of your Shit Go Where account.
• What we don't keep: names, usernames, phone numbers, the text of your messages or your coordinates. A location you send is used for that one search, and to check you are within 150 m when you check in, then discarded. As in the app, a check-in stores only the distance.
• Check-ins and reports from a chat that isn't connected to an account are saved under a scrambled ID made from the chat ID with our server key. It can't be turned back into the chat ID without that key.
• In groups the bot runs with Telegram's privacy mode on: it only receives commands sent to it and replies to its own messages, never the group's conversation.
• Send /stop to the bot to delete the chat's record (its filters and any account link). /unlink or the Unlink button on Me disconnects your account. Deleting your account also removes the link.

Photos

Photos are shrunk in your browser before upload, which also removes embedded location (EXIF) data. Photos are hidden until a moderator or trusted members approve them. Please don't photograph people.

Who sees what

• Other users see your handle on reviews and, only if you opt in, on the leaderboard.
• When you confirm a toilet is still accurate, its page says it was last checked by your handle. You can turn this off on Me.
• We never show your email or real name publicly.
• Data is stored with our hosting providers in or near Singapore (Vercel, Neon Postgres, Cloudflare R2). Usage analytics are the one exception: they go to PostHog in the European Union, under its data processing terms.

Deleting your account

Open Me and choose Delete my account. This permanently deletes your profile, email, points and badges. Toilets, reviews and photos you contributed stay so the map remains useful, but they are anonymised and no longer linked to you.

Contact

For access or correction requests, or questions about this notice, email hello@shitgowhere.com. Tell us the email you signed in with so we can find your account.

Last updated 20 October 2026.