AshMap
AshMap has no accounts, no sign-in and no contact form, so there is nothing here for you to hand over. What follows is the full inventory of what is stored and what is sent anyway, because a map that reads live data always talks to somebody.
Last updated 2026-09-07
This site sets no cookies. Nothing is written to identify you across visits or across sites, and nothing here is shared with an advertising network.
A handful of preferences are stored in your browser's local storage. They never leave the device and are readable only by this site:
• the light or dark theme you chose; • whether times are shown in UTC (Zulu) or your local zone; • whether you have dismissed the introduction; • the newest Darwin bulletin you have already seen, so new ones can be counted; • your auto-refresh interval; • whether you accepted or declined analytics.
Your language is not stored: it is part of the address, which is what makes /en and /id shareable.
Clearing site data in your browser removes all of it, and the app opens at its defaults again.
The site runs on Vercel, which records ordinary web-server logs for every request: IP address, user agent, the path requested and a timestamp. Retention is Vercel's, not ours.
The API routes are rate limited per IP. That counter stores your IP address in a Redis key that expires after 60 seconds. It is used for nothing else and is not read back for any other purpose.
Vercel Analytics and Vercel Speed Insights measure page views and load performance in aggregate. They set no cookies and build no cross-site profile, but they are still a third-party request, so they are not loaded at all until you accept them on the banner. Decline, and the scripts are never fetched.
You can change your mind at any time from the link in the footer of this page.
The basemap under the ash polygons is served by Esri as map tiles, requested by your browser as you pan and zoom. Esri therefore sees your IP address and which tiles you asked for, the same as any embedded map.
Fonts are not one of these: they are downloaded at build time and served from this domain, so no request goes to Google while you use the site.
Advisories, wind, volcano alert levels and NOTAMs are fetched by this site's server, not by your browser. Those upstreams see a request from the server; they do not see your IP address, and nothing about you is forwarded to them.
If you turn on alerts, the browser asks for permission and the notifications are composed on your device from data already on the page. Nothing is sent to a push service, and no subscription is registered anywhere. Revoke the permission in your browser's site settings to stop them.
No data is sold, rented or shared for advertising. There is no profiling, no cross-site tracking, no fingerprinting, and no attempt to identify who you are.
The site is open source, so every claim above can be checked against the code rather than taken on trust. Corrections and questions are welcome.
If what is collected changes, this page changes with it and the date at the top moves. There is no mailing list to notify, because there are no accounts.