Privacy

Reading the site

Browsing MoverCompass requires no account and no details. The search box still runs entirely inside your browser: the directory index is downloaded to your device and matched there, so there is no search server and the index never leaves your browser once it has arrived. What you type into it is recorded, which changed on 10 September 2026 — this page previously said it never left your device. See Search below for exactly what is kept and why.

Cookies

We do not set cookies, and we do not use advertising or cross-site tracking of any kind.

One thing is written to your device, and only if you are a business owner who signs in at the business sign-in: a single sign-in token, stored in your browser’s local storage so you are not asked to sign in again on every visit. It is a random string that means nothing on its own, it identifies your session rather than you, and it is removed when you sign out. Nothing is written to the device of anybody who is simply reading the site.

Claiming a business listing

The claim form is used by owners and managers to claim their company’s listing. Using it is entirely optional and nothing else on the site depends on it.

When you submit a claim we store:

• the listing you are claiming, and the business name you give for it
• your name, your e-mail address, your role, and your phone number if you enter one
• anything you write in the message box
• the file you attach as proof, together with its type and size. It is kept in private storage that is not readable from the web
• a one-way code derived from your IP address, a similar code derived from your e-mail address, and your browser’s user-agent string. The first two exist to stop the form being flooded; neither can be turned back into the address it came from
• the reference we give you, when the claim was submitted, and its status

Where it goes. The form posts to a small service of ours hosted on Supabase, which stores the claim in a private database and the file in private object storage. Neither is readable without our own server credentials. Two e-mails are then sent through Postmark, our e-mail provider: a confirmation to you, and a notification to the person who reviews claims. That notification contains what you submitted and a temporary link to your proof file which stops working after two hours. Supabase and Postmark process this on our behalf and for no other purpose.

What we do with it. We use a claim to check that you are connected to the business, to correct the listing, and to know who to contact about it. We do not sell it, we do not use it for marketing, and we do not add you to any list.

How long we keep it. Your proof file is the sensitive part, and it is deleted as soon as the claim is decided — it has done its job by then and we do not keep a copy. The codes used to stop the form being flooded are separate short-lived records, and they are cleared about an hour after they are made. The claim itself we keep as the record of who asked for a change and why, including the one-way code derived from the IP address it came from; there is no fixed expiry on that, and you can ask us to delete it at any time. Write to us and we will, unless we are still working on it.

Only send what is needed. Proof of who you are does not need to include everything else on the page. Cover account numbers, balances, signatures and anything else you would rather we did not hold before you upload.

Your business sign-in

If we approve your claim we email you a password, and you can sign in to keep your own listing details up to date. That account holds:

• the e-mail address you claimed with, your name, and which listings you may edit. These come from the claim you already sent us
• a scrambled version of your password. We store the result of a one-way calculation over it, never the password itself, so nobody at our end can read it or tell you what it is
• your live sign-ins: a one-way code for each session, when it started and when it expires, a one-way code derived from the IP address it started from, and your browser’s user-agent string. Sessions expire after fourteen days, and signing out ends one immediately
• a one-way code derived from your IP address and from your e-mail address for each sign-in attempt, so that repeated wrong guesses can be refused. These are deleted after a day
• the details you enter about your business — phone, website, description, services, areas, opening hours and operating numbers — together with every earlier version of them and the date each was saved. Those details are published on your listing, which is the point of entering them; the history is kept so a change can be traced and undone
• the photographs you upload, their captions and the order you put them in. Before we store a photograph we strip the file down to its picture: the camera data that travels inside an image file, which can include the exact place and time it was taken and the device that took it, is discarded on our server and never written anywhere. What we keep is the picture, its size, your caption and its position. Photographs are published on your listing and are public — anyone can see them and search engines can index them — so please only upload ones you took or own, and none with a customer’s face, name or address in them

What we never do with it. We do not sell it, we do not use it for marketing, and we do not add you to a list. We will not confirm to anybody else whether a given address has an account here, which is why the “forgotten your password” page answers the same way whatever address you give it.

How long it stays. The account lasts as long as you want it. Ask us to close it and we delete the password, the sessions and the sign-in records; the details you published on your listing revert to what we hold from public sources. Remove a photograph and the file itself is deleted from storage immediately, and it comes off your listing at the next publish. Expired sessions and spent reset links are cleared automatically.

Measurement

MoverCompass runs one small script of its own, served from this site, which records how pages are used so we can tell which ones are worth keeping and improving. It is not Google Analytics and it is not any other third-party product: the script is ours, it sends to this domain, and the records go to infrastructure we operate. No advertising network, data broker or analytics company receives anything.

What a record contains:

• the page you are on
• the website that linked to you, if any — the hostname only, never the full address and never its query string, because a search engine’s address can contain what somebody typed
• your country, region and city, as your network reports them to our hosting provider. Never your street address, and never the coordinates the provider offers
• your device type, browser and operating system, reduced to broad categories such as “mobile / Safari / iOS”, and the width of your browser window
• how quickly the page loaded and how steady it was while loading, so we can find pages that are slow or that move under your finger
• how long the page was actually visible, how far down it you scrolled, and whether you clicked out to a business’s own website, phone number or e-mail address

Your IP address is not stored. It is used once, on our server, to compute a short one-way code so that forty page views can be told apart from one person reading forty pages. That code mixes in a secret that changes every midnight, so the same person is a different code tomorrow and no history can be assembled about anyone across days — not by us, and not by anyone who obtained both the secret and the data. The code is never sent back to your browser and nothing on this page can read it.

The address of the page is still recorded without its query string. A query string is the part after a ?, and on this site it can hold a claim reference or a campaign tag. It is removed before the record is sent, so nothing that reached one of our addresses is transmitted with the page view.

What you type in the search box is recorded, separately and deliberately. Until 10 September 2026 it was not, and this page said so. We changed it for one reason: the searches that come back empty are the only direct evidence of which moving companies and which towns are missing from the directory, and we could not see a single one of them. A record contains the words you typed, how many companies matched, how many were shown, which box on the site you used, the state or province your words named if they named one, and the spelling our matcher tried if it had to correct you.

It rides on the same measurement record as everything above, so it carries the same short one-way code and nothing else — no name, no e-mail address, no account, no IP address, and a different code tomorrow. We use it to decide what to add next. We cannot use it to work out who typed it, and neither could anyone who obtained the data. Do Not Track and Global Privacy Control stop it exactly as they stop everything else here.

If you would rather not be measured, you already are not. The script checks for Do Not Track and Global Privacy Control before it does anything, and our server discards the request as well if either signal arrives, so the choice is honoured twice over. Most content blockers also stop it outright, and the site works identically either way.

Server logs

Our hosting provider records standard web-server information for each request — the page requested, a timestamp, the browser’s user-agent string and its IP address — as part of delivering and protecting the site. We use this only in aggregate, to understand which pages are being read and to detect abuse. We do not attempt to identify individuals from it and we do not combine it with anything else. That is separate from the measurement described above, and neither is joined to the other.

Information about businesses

Listings are compiled from public sources: business profiles published on Google, and the businesses’ own websites. Reviews are reproduced as their authors published them publicly, with two reductions applied for privacy — display names are shortened to a first name and an initial, and any e-mail address or phone number appearing in review text is removed.

If you wrote a review that appears here and you would rather it did not, write to support@movercompass.com and we will remove the quotation. Note that removing it here does not remove it from Google, which is where it was published.

Asking us about your data

Write to support@movercompass.com and we will tell you what we hold about you, correct it, or delete it. If you have submitted a claim, quoting its reference makes that immediate; without one we may need enough detail to find the right record.

Links out

Pages link to businesses’ own websites, to their social profiles and to other directories. Those sites have their own privacy practices, and we have no control over them.

Changes

If this policy changes in a way that matters, the changed version will appear here. Questions go to support@movercompass.com.