Legal

Privacy Policy

We believe in plain English, not legalese. Here is exactly how we handle your data, keeping it safe and private.

Last updated: August 5, 2026

1. What We Collect

The Short Version

We only collect what we need: your email, your maps, and basic usage stats.

  • Account Info: Email address and name.
  • Project Data: Your GPX files, pins, and stories.
  • Usage Data: Basic product usage, like view counts on stories you publish. We don't run third-party analytics or behavioral tracking.
  • Payment Data: Handled securely by Paddle, our Merchant of Record (we never see your full card number).

2. How We Use It

The Short Version

We use your data to make RouteTale work. We NEVER sell it.

  • Operating the Service: Saving your routes and rendering maps.
  • Communication: Sending essential account and billing emails.
  • Improvement: Fixing bugs and building better features.

3. Data Sharing

The Short Version

We only share data with essential services (like hosting or payments).

  • Sub-processors: cloud object storage (S3-compatible) for your files, Paddle (payments), Resend (emails), MapTiler (map tiles), Sentry (error monitoring — no email or location data included).
  • If you connect Google or Strava to import a route, that service processes only the data you authorize.
  • Legal Compliance: Only if required by a valid legal request.
  • Public Stories: If you publish a story, it becomes public. Do not share sensitive locations.

4. Your Rights

The Short Version

It's your data. You can ask us to export or delete it anytime.

  • Self-service export and account deletion from Settings are not available yet — email support and we'll handle the request for you.
  • Once a deletion request is processed, your data is permanently removed within 30 days.
  • Email support for any GDPR or privacy request — access, correction, deletion, or portability.

5. Cookies & Local Storage

The Short Version

No third-party tracking cookies — just the login token that keeps you signed in.

  • We store your login session (access and refresh tokens) in your browser's local storage so you stay signed in.
  • We don't use third-party advertising or tracking cookies.
  • Clearing your browser storage will sign you out.