What we collect
Route data you create
When you save a route, we store the route name, waypoints, route details, and safety notes so you can load it later.
Account information (optional)
When you sign in with Google, we collect your email address and profile ID. This is necessary to verify your identity and securely store your routes so they are private to you.
How we use data
- To save and retrieve routes for you.
- To generate route summaries, exports, and print packs.
- To troubleshoot errors and keep the service reliable.
Google User Data
Data We Access: When you sign in with Google, RouteCard Maker requests access to the following information from your Google account:
- Your email address (to identify your account)
- Your display name (to personalise the app)
- Your profile picture URL (to display in the app header)
How We Use This Data: This data is used solely to:
- Identify you and authenticate your account
- Store and sync your hiking routes securely
- Display your name and profile picture in the app
No Sale of Data: We do not sell, trade, or transfer your Google user data to third parties. Your data is never used for advertising, marketing, or any purpose other than providing the RouteCard Maker service to you.
Data Retention: Your Google account data is retained for as long as you maintain an active account. Route data you create is stored until you delete it or request account deletion. We do not retain Google user data after account deletion.
Limited Use Disclosure: RouteCard Maker's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who can see your routes
Private (saved)
Only you, signed in to the account that saved it. A link to it does not work for anyone else.
Shared by link
Anyone you give the link to can open the route and its safety details (group, medical notes, emergency plan, late-back contacts), which are meant for your group. Your email address is never shown. You can share without an account; such a route has no owner and cannot be edited or deleted by anyone afterwards (email us to remove it).
Public
Listed in Discover for everyone. Others see the route, its name, waypoint names and notes, and likes; group, medical, emergency and late-back details are hidden from everyone but you.
Likes
Liking a public route records your account against it; others only see the total.
Services we rely on
What each one receives. Routing, heights and your saved routes run on our own server.
Sign-in: Clerk
Clerk runs sign-in (including "Sign in with Google") and holds your account: email address, name and profile picture. We receive your account ID and email.
Place names: OpenStreetMap services
To name a waypoint, our server sends its coordinates (not who you are) to Nominatim (OpenStreetMap Foundation), the Overpass API servers and Geofabrik's Postpass. Names are cached on our server.
Weather: MET Norway
Our server asks MET Norway (yr.no) for the forecast at a waypoint's coordinates.
Map tiles: OpenTopoMap
Your browser loads map images directly from OpenTopoMap's servers, which see your IP address and the area you view.
Routing and heights
Calculated on our own server (BRouter, OpenStreetMap data; terrain tiles from AWS Open Data, downloaded by area, with nothing about you).
Cloudflare
Cloudflare carries all traffic to the site (and sees IP addresses), runs the Turnstile bot check and Web Analytics (no cookies), and serves some libraries (cdnjs).
Libraries and fonts
Your browser loads libraries from jsDelivr and cdnjs and fonts from Google Fonts, which see your IP address.
Only if you allow them
LogRocket (session recording and error reports) and Ahrefs (web analytics) load only after you accept them in the cookie banner. Change your choice any time under Account → Cookie settings.
Open-source software and data licences: see Acknowledgements.
Data retention & deletion
How long we keep your data: Your account information and route data are retained for as long as your account is active. If you stop using the service, your data remains available should you return.
Your rights: You can request the deletion of your account and all associated data (including any Google user data we hold) at any time by emailing [email protected]. We will process deletion requests within 30 days.
Cookies & analytics
Always set (needed for the site to work):
rc_clearance,rc_cleared: you passed the bot check (24 hours).__session,__clientand similar: Clerk sign-in, when you sign in.klaro: your cookie-banner choices.- Cloudflare may set its own security cookies (e.g.
__cf_bm,cf_clearance).
Only with your consent: LogRocket (_lr_*) and Ahrefs analytics.
Your browser also keeps some settings locally (units, colours, calorie weights, auto-routing, recent routes and cached routes); they never leave your device.
We do not sell your personal data. Analytics data is used solely to improve RouteCard Maker and is not shared with third parties for marketing or advertising purposes.
Contact
Questions or requests?
Email us with privacy questions or data requests.