Privacy policy

The short version: no accounts, no cookies, no personal data. This page expands on what that means in practice.

What we measure

We use Cloudflare Web Analytics, which is cookieless and aggregate-only: it tells us which pages are visited, roughly where visitors come from (country level), and which sites referred them. It does not use cookies, does not fingerprint individual visitors, and cannot follow you across the web. GPX downloads are counted the same way — which file, how often, never who.

Error reporting

When something on the site breaks, an anonymous technical report is sent to Sentry: the error message and the browser/device type it occurred on. These reports contain no names, no email addresses, and no location data; we use them only to fix bugs.

What stays on your device

Several features work entirely in your browser and never transmit anything: on-ride mode reads your GPS position to show what's nearby, and that position is processed only on your device — it is never sent to us or anyone else. Your Route Patches check-ins and My ride stop selections are saved in your browser's local storage on this device only. Clearing your browser's site data removes them; nothing is synced or backed up anywhere. On the first page of each visit, your browser also keeps where you came from — the domain of the referring site (never the page), or the campaign tags from the link you clicked (utm source, medium and campaign), or simply "direct" — in session storage until you close the tab, so our aggregate counts can tell which listing brought riders. No personal data, nothing that identifies you.

Third-party requests

Map tiles are loaded from OpenStreetMap and CyclOSM servers, and the map library (Leaflet) from the unpkg CDN. Your browser requests these directly, so — as with any web request — those servers see your IP address. We send them nothing about you.

Email

If you write to us, we use your message to reply. Your address is not added to any list.

Route launch emails

If you sign up to hear about new routes, we store the email address you enter, the language you signed up in, and where the visit came from (the referring site's domain or the campaign name from the link you clicked, or "direct") on Cloudflare, solely to send you one email per route launch and to know which listings work. Nothing else is stored, and the address is never shared. To be removed, use the unsubscribe link in any message or simply reply — we delete the address.

Why there is no cookie banner

Consent banners are required for cookies and tracking that need consent. We use neither, so there is nothing to consent to.