Privacy Policy

Last updated: 19 February 2026

Introduction

HotPot is a free tool for logging road defects. This privacy policy explains how we handle your data when you use hotpot.org.uk.

The short version: All your pothole data stays on your device. We don't collect, store, or track anything about you. Your location data is only used to capture GPS coordinates when you tap a button.

What Data We Collect

Location Data

When you log a pothole, HotPot captures:

• GPS coordinates (latitude and longitude)
• Accuracy measurement
• Compass heading (if available)
• Timestamp

This data stays on your device. It is stored in your browser's local storage and is never uploaded to our servers unless you explicitly choose to export it.

Address Lookups

To show you street names, HotPot sends your GPS coordinates to:

• OpenStreetMap Nominatim API (for reverse geocoding)
• mySociety MapIt API (for council boundary lookups)

These are third-party services. We don't control their privacy practices, but both are reputable non-profit organizations:

• OpenStreetMap Foundation: Privacy Policy
• mySociety: Privacy Policy

What they see: Only the GPS coordinates you log. They don't receive any identifying information about you.

Hosting & CDN

HotPot is hosted on infrastructure that may use:

• Cloudflare - for content delivery and security

Cloudflare may process technical data like your IP address, browser type, and access times as part of providing CDN and security services. See Cloudflare's Privacy Policy.

What Cloudflare sees: Standard web server logs (IP address, request URLs, timestamps). They don't see your pothole logs or GPS coordinates unless you're actively using the site.

What We Don't Collect

• We don't use cookies (except for remembering you've seen the safety disclaimer)
• We don't use analytics or tracking
• We don't collect your email, name, or any personal identifiers
• We don't track your movement or journey
• We don't sell or share your data with anyone

How Your Data Is Stored

Local Storage

All pothole logs are stored in your browser's local storage. This means:

• Data stays on your device
• We can't access it
• If you clear your browser data, your logs will be deleted
• Different browsers/devices have separate storage (logs don't sync)

Backups

You can export your data as:

• JSON files - for backup/transfer between devices
• CSV files - for submitting to councils

When you export, you control where those files go. We don't receive copies.

Reporting to FixMyStreet

HotPot includes links to report potholes via FixMyStreet, a service run by mySociety.

When you click "Report to FixMyStreet":

• You leave HotPot and go to FixMyStreet's website
• Your GPS coordinates are included in the URL
• FixMyStreet's privacy policy applies from that point

We are not responsible for FixMyStreet's data handling. See their privacy policy.

Progressive Web App (PWA) Features

HotPot can be installed as a Progressive Web App on your device. This uses:

• Service Workers - to cache files for offline use
• Wake Lock API - to keep your screen on in Journey Mode

These features run entirely on your device and don't transmit data to us.

Your Rights (GDPR)

Because we don't collect your data, there's nothing for us to delete, correct, or provide. You have complete control:

• Access: All your data is in your browser's local storage
• Portability: Export as JSON anytime
• Erasure: Clear your browser data or delete individual logs
• Objection: Don't grant location permission, don't use the app

Children's Privacy

HotPot is not intended for children under 13. We don't knowingly collect data from children. If a parent/guardian believes a child has used HotPot, they can clear the child's browser data to remove any logs.

Security

HotPot requires HTTPS, which encrypts data in transit. Your logs are stored locally on your device and are as secure as your device is.

Recommendations:

• Use a device passcode/biometric lock
• Export and backup important data
• Don't share devices if you want logs private

Changes to This Policy

We may update this privacy policy occasionally. Changes will be posted on this page with an updated "Last updated" date.

Significant changes will be announced via the app interface.

Contact

HotPot is operated by:

Ki-Ki.co.uk / The Reasonable Adjustment
Website: ki-ki.co.uk | thereasonableadjustment.co.uk

For questions about this privacy policy or data handling, contact us via the websites above.

Third-Party Services Summary

Service	Purpose	Data Shared
Cloudflare	CDN and security	IP address, browser info, access logs
OpenStreetMap Nominatim	Convert GPS to street address	GPS coordinates only
mySociety MapIt	Identify responsible council	GPS coordinates only
FixMyStreet (optional)	Report to councils	GPS coordinates (when you click link)

Open Source

HotPot is built with open web technologies. You can inspect the code by viewing the page source in your browser.