Privacy policy

What we collect

• First-party analytics. Page views and a few events (a search, a unit change) with the page, the referrer, a device type and a country code. We hash a daily-rotating salt with your IP address and browser to count visitors; the hash cannot follow you across days, and the IP address itself is never stored. There is no cookie for this.
• Preferences. Theme and units are kept in your browser's local storage and never sent to us.
• Push alerts (if you turn them on): the push subscription your browser issues and the tracks and alert types you picked, under an anonymous token. Turning alerts off deletes it.
• Feedback. What you type and, if you give it, your email address, so we can reply.
• Track photos you send. The photo (shrunk on your device; the location and camera data your phone saved are removed before it reaches us), the name you want credited, your email if you give it, and your IP address to stop abuse. Only the photo and the name are ever shown.
• Server logs. Standard request logs, kept briefly for debugging.

Third parties

• Forecasts come from Open-Meteo; the request carries a track's coordinates, never anything about you.
• Fonts load from Google Fonts.
• Google Analytics and Google AdSense load only after you press Allow in the notice at the bottom of the page. Until then no Google script runs. If you allow them, Google's own policies apply to what they collect; you can clear your choice by clearing the site's data in your browser.
• The site is hosted on Railway behind Cloudflare, which see the traffic as any host does.

Your choices

You can use the whole site without allowing anything. To remove push alerts, turn them off in the alerts panel or revoke the permission in your browser. To ask what we hold or to have feedback deleted, write to [email protected].

Last updated October 2026.