Privacy policy
Not a policy — do not publish
This page is structural only. It must be written and legally reviewed before any email address is captured anywhere on this site, and the noindex on this route removed at the same time. See docs/features/web-app/05-privacy-and-email.md.
Who we are
Placeholder copy
Controller identity and contact details. Required — cannot be omitted.
What we collect
Placeholder copy
Account email, saved routes and their GPX, and any cookieless analytics.
Why, and on what legal basis
Placeholder copy
Contract for the account and saved tracks; consent for marketing email only.
Marketing email
Placeholder copy
Separate, unticked, optional. Declining does not block registration. Unsubscribe in every message.
Cookies and analytics
Placeholder copy
No cross-site tracking. localStorage for your in-progress route is functional, not tracking.
How long we keep it
Placeholder copy
Retention periods per category of data.
Your rights
Placeholder copy
Access, rectification, erasure, restriction, portability, objection (GDPR Art. 15–22), and how to exercise them.
Deleting your account
Placeholder copy
What is removed and when — the Cognito user, the saved-track rows, and the stored GPX files.
Changes to this policy
Placeholder copy
How changes are communicated.