Location data at sign-in

For your security, each sign-in is recorded with the time, your device and browser details, and your IP address. From your IP address we derive an approximate city, using a database held on our own systems. Your IP address is not sent to a third party for this purpose.

If you give this consent, we also record the location reported by your device at sign-in (its coordinates). Your browser or device will ask for permission before sharing it, and you can refuse at that point too.

We use location at sign-in only to protect your account: to recognise the places you normally sign in from, to flag sign-ins from unusual locations, and to investigate suspected fraud or unauthorised access. We do not use it for marketing.

Precise coordinates are reduced to the nearest city after 90 days. Sign-in records are kept for a limited period for security and audit and are then archived.

Declining has no effect on your ability to create or use an account. We will not record your device’s coordinates, and we will continue to use the approximate city derived from your IP address as described in section 1.

You may withdraw this consent at any time by contacting hello@mypennytree.com. Withdrawing stops us recording precise location from then on. It does not affect sign-in records made before you withdrew, which we keep for security and audit purposes.

Each version of this notice carries a version number and effective date at the top of this page. If we change how we use location data, we will publish a new version and, where required, ask for your consent again.

Questions about this notice can be sent to hello@mypennytree.com.