CLEAR FROM THE START

Your family. Your photos.

Pumpkin Path is an informational map and a private photo journal for adults. It is not a safety assessment or a record of someone's current whereabouts.

Location and registry information

We request location only after you choose to use it. When you search nearby records, the coordinates of your selected location are sent to our server and Offenders.io. You can choose device location or enter an address, city, or ZIP code. After you type at least three characters and pause, location text goes to our server and Mapbox to suggest matching addresses. Submitting the form also looks up the entered text; these temporary results stay in browser memory and are not saved in your journal or our database. Mapbox receives map requests. Registry results are not stored as a permanent directory in our database. We retain limited request timing, a daily keyed hash of your IP address for abuse controls, and budget records; we do not put family coordinates into routine usage analytics.

A registry address may be outdated or imprecise. A pin does not establish who currently lives at an address. No returned records does not mean a home or route is safe. Use source links to check the original record. Never use this information to harass or threaten anyone.

Your local photos

New photos, notes, capture times and saved locations are stored in this browser on your device. They are not uploaded to a photo account. Images are compressed locally and embedded metadata is removed. A camera location is approximate phone GPS; older uploaded images are not assigned your current GPS. We show the capture time when known, or label the time the image was added.

Local photos stay until you delete them or the browser removes site data. Clearing site data, private browsing, storage pressure or switching devices can make them unavailable. Download or export anything you want to keep. Anyone with access to this unlocked browser can open your local collection. Saving may fail when device storage is full; an error is shown instead of claiming the photo was saved.

If this browser already has a session from the earlier cloud journal, we copy its available photos to this device in the background. The original cloud files are unchanged and retain their original 30-day expiry. Deleting a local copy prevents it from being imported again. Cloud access continues to require the original private session.

Site analytics

We use Google Analytics to understand visits and basic browser and device information. Google receives these requests and uses analytics cookies to recognize returning browsers. Analytics receives general page names, with photo identifiers and URL queries removed. We do not send your photos, notes, entered addresses, or precise location to Google Analytics. Automatic form and outbound-link tracking and advertising personalization are disabled.

To monitor reliability, the app reports fixed error categories, general page categories (such as Map or My photos), app build versions, and counts to our server and sends operational alerts to our Slack channel. These alerts contain no photos, notes, entered addresses, precise coordinates, raw page URLs, photo identifiers, or raw error messages or stacks. Browser error reports use a daily hashed connection identifier for rate limits.

Your choices

You can decline device location, use an address to choose the map center, and still access your gallery. The map initially shows Oak Park, Illinois; that starting view is not a detected location. You can correct a photo's location, add notes, delete individual photos, or export your collection. Avoid including children or bystanders in item photos. Avoid using a shared browser: anyone with access to it can open your journal. Clearing browser data or switching devices loses local photos, and there is no email recovery. Support contributions never change your access to features or imply a safety guarantee.