Privacy Policy

📱 Local-First Approach

RouteCoinMe is designed with your privacy as our top priority. All your GPS route data is processed and stored locally on your device by default. If you choose to import activities from Strava, we temporarily relay that activity through our secure cloud importer to deliver it to your browser; the data is discarded immediately after transfer and never logged or stored on our servers.

🗂️ What Data We Process

• GPX Files: Your uploaded route files are processed entirely in your browser
• Route Statistics: Distance, elevation, and timing data calculated locally
• Browser Storage: Routes saved to your device's local storage for convenience
• Strava Imports: Selected Strava activities pass through our stateless cloud relay only long enough to reach your browser; nothing is persisted
• No Personal Information: We don't collect names, emails, or any identifying data

💾 Data Storage

Your route data is stored using your browser's local storage mechanisms (IndexedDB or localStorage). This means:

• Data stays on your device and is never transmitted to external servers unless you use the Strava importer
• Strava imports are streamed directly to your browser without being saved on our servers
• Only you have access to your stored routes
• Clearing your browser data will remove stored routes
• No built-in cloud synchronization or backup—your routes stay in your browser unless you export them manually

🌐 Third-Party Services

RouteCoinMe uses minimal third-party services for core functionality:

• OpenStreetMap: Map tiles for route visualization (no personal data sent)
• Leaflet Maps: Client-side mapping library (no data transmission)
• Three.js: 3D visualization library (runs entirely in your browser)
• RouteCoinMe Strava Importer: Cloud relay that fetches Strava activities you select and forwards them to your browser without logging or persistence

🔗 Optional Strava Integration

If you choose to connect with Strava (completely optional):

• You explicitly authorize the connection through Strava's official OAuth
• Only the Strava activities you explicitly import are fetched; we convert them to RouteCoinMe's lightweight route format and discard the original Strava payload immediately
• The converted route is streamed to your browser for local use and is never stored or forwarded elsewhere
• You can disconnect at any time
• Strava's privacy policy applies to data shared with their service
• Local processing remains the default for all operations

📊 Analytics and Tracking

We believe in complete transparency:

• No Analytics: We don't use Google Analytics or similar tracking
• No Cookies: No tracking cookies or session cookies
• No Fingerprinting: We don't attempt to identify or track users
• No Server Logs: We never log Strava import payloads or any route content on our servers

🛡️ Data Security

Since all processing happens locally:

• Your route data never travels over the internet unless you opt into Strava imports
• Strava imports travel over encrypted channels and are not stored or logged by us
• No risk of data breaches from our servers (we don't store your data)
• Browser security features protect your local data
• You maintain complete control over your information

🔄 Data Export and Deletion

You have complete control over your data:

• Export: Download any route as a GPX file at any time
• Delete: Remove individual routes or clear all data instantly
• Portable: Your exported GPX files work with any GPS software
• No Vendor Lock-in: Switch to any other service anytime

📞 Contact

Questions about our privacy practices? Since we don't collect your data, there's nothing for us to misuse! But if you have concerns or suggestions, you can reach us through:

• GitHub Issues: github.com/bsyk/routecoinme
• Open Source: Review our code to verify our privacy claims

📅 Policy Updates

This privacy policy may be updated to reflect new features or clarify existing practices. Any changes will:

• Maintain our local-first, privacy-first approach
• Be clearly communicated through the application
• Never reduce your privacy protections without your explicit consent