Last updated November 2026.
Jarvizar City Model is made by me, Jarvizar on MakerWorld. Models are built in your browser. I never see your settings, your edits, your routes, the files you download, or the areas you pick, apart from what the LiDAR proxy below sees. You don't need an account to use the site. An account is only for redeeming a code, so you have your tier on any device.
I don't store anything about you. Your settings, edits, imported routes, and downloaded map data are saved in your browser only, and Help has a link to clear the map data.
Map data, elevation, LiDAR, and map tiles are downloaded straight from their public sources (Overture Maps, Mapterhorn, AWS, OpenFreeMap, Esri, and the LiDAR publishers), and some LiDAR files through a small proxy I run. Like any server, they see your IP address and which files you asked for. The proxy doesn't keep a log of them. Searching for streets and addresses sends what you type to Photon (photon.komoot.io), or to Nominatim (nominatim.openstreetmap.org) when Photon is down.
The live site counts visits with Cloudflare Web Analytics, which doesn't use cookies or track you between sites.
It also counts how many models are generated and downloaded and how many fail, so I can tell when something stops working. Each count only says whether it started, finished, failed (and roughly why, like running out of memory or no LiDAR survey covering the area), was canceled, stopped to ask before downloading LiDAR files, or ended because the page was closed, how long it had run and which step it had reached, whether the page was hidden while it ran, and whether it was the same model tried again right after it failed. It also says the kind of model (map, map with LiDAR buildings, or LiDAR only), your browser and system without versions (like "Safari, iOS"), or the app the site was opened in, and the site's version. It doesn't include the area, location, your other settings, or your IP address, and counts carry no id that links them to each other. They're kept for 3 months at Cloudflare.
When something goes wrong in the site itself, and not because of the area, its data, or your connection, the page sends me the error message, where in the site's code it happened, your browser and system (like "Safari 18, iOS"), or the app the site was opened in, and which version of the site you had. It leaves out web addresses, file names, email addresses, coordinates, and anything in quotes, and it doesn't include where the area is or your IP address. If the browser closes the page while it's generating a model or preparing a download, the next visit also sends what kind of model it was, the size of the area and the print, a few settings that use the most memory (like the terrain or LiDAR resolution, and whether LiDAR buildings, trees, or bridges were on), how far it got, and how much memory and how many processor cores your browser reports. These are kept for 7 days in the site's logs at Cloudflare.
If you sign in, only this is stored:
To prevent abuse, the site counts sign-in mails per email address and tries per IP address, and keeps those counts for a few days. Both are only stored as keyed hashes, never in plain text, so an address someone typed without ever signing in isn't stored. A sign-in code is stored as a hash and works for 10 minutes.
If you backed the campaign on MakerWorld, your MakerWorld nickname, the tier you pledged for, and your MakerWorld user id may be on a list the site checks codes against, whether or not you ever sign in. It comes from MakerWorld's list of backers. A refunded pledge stays on the list, marked so it can't be redeemed.
Your models, areas, settings, edits, and routes are not part of your account. They stay in your browser.
Signing in sets two cookies. One keeps you signed in for 90 days at a time and at most a year. The other only says that someone signed in on this browser, so the site knows to look up your tier when you come back. Asking for a sign-in code sets one for an hour, so the code only works in the browser that asked for it, and Google sign in sets one for the 10 minutes it takes. Your browser also keeps a signed note of your email, your account's id, and your tier, so the site knows your tier offline. It's replaced whenever the site checks with the server, stops working after 30 days without that, and is removed when you sign out. While you're signing in, the tab also remembers the address your code went to and a code from a link you opened, until you're signed in or close the tab. There are no advertising or tracking cookies.
I don't sell or share your data, and I don't send marketing mail. The only mail the site sends is a sign-in code, when someone asks for one with your address.
Open your account on the site and choose Delete account. That removes your email address, your sign-in methods, and your sessions right away, and ends your tier. The log of when you signed in and any notes about you are deleted too. A record without your email is kept so a redeemed code or pledge can't be redeemed again. It has what the account redeemed and when, and what I changed on it for support. If you redeemed with your MakerWorld nickname, it stays on the list of backers, marked as used. You can also ask me to delete it, or ask for a copy of what's stored about you.
Email me at citymodel@jarvisar.com. Cloudflare forwards mail sent there to a Gmail inbox I use for the site, so Google stores it too. If what the site stores changes, I'll update this page and the date at the top.