Privacy & data
Updated 22 September 2026
BikeRouteNow processes the information needed to plan and share cycling routes, secure the service, measure its use and, with permission, support analytics and advertising.
New features: non-location ride preferences and units can be remembered in this browser. Creating a share link stores the chosen route on the server for 90 days, including start, finish, geometry and elevation. Anyone with the link can view it. Unshared routes are not saved in this store. For deletion before expiry, contact bikeroutenow@gmail.com with the link.
Who runs BikeRouteNow?
BikeRouteNow is my personal hobby project. For privacy questions or requests, email bikeroutenow@gmail.com.
What data is processed?
For route calculation, BikeRouteNow processes the addresses, locations or coordinates you enter. With browser permission, your current location can be used. For each route generation, the server logs the IP address, the country inferred by Cloudflare and technical request data for security, abuse prevention and troubleshooting. Your language choice requires no account.
Purpose and legal basis
Data is used to provide the requested route, map and sharing service, secure the site and improve its operation. The legal bases are performing your request, legitimate interests for security and limited aggregate statistics, and consent for optional analytics and advertising. Your current location is requested only after you allow it in your browser.
External services
Place searches use Photon. Weather and missing elevation data use Open-Meteo. Numbered junction connections use OpenStreetMap data through Overpass. In production, route calculation runs on our own BRouter service. Map tiles are loaded directly from OpenStreetMap when a route map is shown. These providers can receive the coordinates needed for the request and technical connection data. Ko-fi opens when you follow a support link.
Analytics and cookies
We count daily page views and use of features such as route searches, preferences, downloads and sharing on our own server. These statistics contain only totals and separate category counts, without cookies, visitor identifiers, IP addresses, user agents, entered text, addresses, coordinates or shared-route IDs. We do not build visitor profiles or recognise returning visitors from these counts. They are retained for 90 days. The basis is our legitimate interest in improving the site with minimal impact on privacy. You can object by disabling basic site statistics under Privacy settings; Do Not Track and Global Privacy Control also disable measurement.
With your analytics consent, Google Tag Manager loads Google Analytics and, if configured, Umami. They receive page views and feature events, page language, coarse preference categories and campaign information. We remove route IDs and other private URL parameters and do not send addresses, coordinates, email addresses or route contents. Google may process online identifiers, IP addresses and device/browser information. Optional events before consent are not replayed.
Advertising measurement and personalised advertising have separate choices. If you allow them, Google may use cookies and interaction data to measure campaigns and create advertising audiences. Google AdSense ad spaces are enabled only after a valid choice from Google’s certified Privacy & messaging consent platform; its message lists advertising vendors and purposes. Without a valid advertising choice, ad requests remain blocked.
You can refuse optional cookies and continue using the planner. Use Privacy settings in the footer to change or withdraw your choice. Our consent record is stored locally for up to 180 days; the Google consent platform manages its own consent record when enabled. Withdrawing consent stops new optional measurements, clears accessible first-party Google tracking cookies and may reload the page. Third-party cookies can be removed in your browser.
Google Analytics event retention is configured in the Google account. Google and other providers may process data outside the EEA under their applicable transfer safeguards. More information is available at policies.google.com/privacy and policies.google.com/technologies/partner-sites. Contact bikeroutenow@gmail.com for questions or privacy requests.
Retention and security
Unshared route searches are not stored as route records or in server logs. Shared routes expire after 90 days; expired files are cleaned up on access and at least hourly while the service is running. Saved browser preferences contain no locations and can be disabled in the planner. IP addresses used for rate limiting remain in server memory for no more than one hour. The IP address and country of a route generation are also recorded in the protected server log and retained according to the system log retention setting. External services and hosting providers may use their own logs and retention periods. The production connection is intended to be secured through HTTPS.
Your rights
You may request access, correction or deletion of personal data, object to processing or request restriction. Email bikeroutenow@gmail.com. You may also lodge a complaint with the Dutch Data Protection Authority.
Changes
This notice may change when BikeRouteNow or its services change. The latest version and date are always shown on this page.