Privacy policy
Last updated 26 October 2026
BowMaps is a personal proof of concept run by Fabion Kauker (contact: f.kauker@gmail.com). It is an MCP server that Claude, ChatGPT and other AI apps call on your behalf to query infrastructure datasets and draw maps and charts.
What we collect
- Your sign-in identity: the account identifier, email address and name that Microsoft, Google or the email one-time code step returns when you connect. We use it to decide whether you may use BowMaps and to tell users apart.
- Connection records: which app you connected (for example Claude) and the grant that lets it call BowMaps for you. Access and refresh tokens are stored only as hashes, and the details attached to them are encrypted. They are kept until you disconnect, or for at most a year, or 30 days after the app last used them.
- Tool calls: for each call, the time, your account, the tool, its inputs (such as the SQL or map layers, cut to 2,000 characters), whether it worked and how long it took. These logs are used to run, debug and improve the service, and are kept for up to 30 days.
- Technical logs: standard request logs (URL, status, timing, user agent, approximate location from your IP address), kept for up to 30 days.
We do not receive your conversations with the AI app, only the tool calls it sends to BowMaps. We do not sell data, show ads, or use your data to train AI models.
Cookies
Sign-in uses short-lived cookies (ten minutes) that tie each step to your browser, plus one that remembers which apps you approved (up to 30 days). There are no tracking or advertising cookies.
Who processes it
- Cloudflare hosts BowMaps (Workers, Containers, R2, KV) and runs the one-time email code sign-in (Cloudflare Access).
- Microsoft or Google, if you sign in with them, under their own privacy policies.
- The AI app you use (for example Anthropic's Claude or OpenAI's ChatGPT) sends the tool calls and receives the results, under its own privacy policy.
Your choices
You can disconnect BowMaps in your AI app at any time. To have your account and records deleted, or to ask what we hold about you, email f.kauker@gmail.com.
Changes
If this policy changes, the date above changes with it.