Privacy
Last updated: 2026-04-27
ESPGeiger is a hobby project run by one person in the UK, hosting a small public map of background-radiation readings sent in by volunteers. The firmware is open source at github.com/steadramon/ESPGeiger. For any privacy question, email contact@espgeiger.com.
What's collected
When your device is set to "Heartbeat" or "Full readings", it signs a small message to us with: a cryptographic public key, the chip's serial number, build info (firmware version, board, optional Geiger-tube name), your participation mode, the actual radiation readings (only in full mode), some device-health metrics, and optionally your latitude and longitude (set by you in the device portal; rounded to roughly 1 km of resolution before storing). Your IP is used during the request but isn't stored. If you don't set your own coordinates, we'll resolve an approximate location from your IP, which you can override at any time in the device portal.
Browsing stations.espgeiger.com or
installer.espgeiger.com sets no cookies and runs no
analytics; the access log only sees your truncated IP and rotates
within a few days.
How long it sticks around
- Minute-resolution readings: 90 days.
- 15-minute averages: kept indefinitely, so the map can show long-term trends.
- Your station's registry row: while it's active, then six months after the last contact, then auto-retired.
Your rights
The "Forget station" option in the device's web portal sends a signed delete to our server — the registry row, all your readings, and the per-station database file all go. It's irreversible: re-enabling later creates a fresh station with no link to the old one.
For anything else — access, corrections, or deletion when you no longer have the device — email contact@espgeiger.com and we'll respond within 30 days.
Installing the firmware indicates consent; you can revoke any time by switching to "Off" or using "Forget station". We also rely on legitimate interest to keep the map running and protect it from abuse.
What we don't do
No selling, sharing, or trading. No analytics or advertising. No profiling or automated decisions. No cross-border transfers — one server, in the UK, with a UK-based hosting provider.