Privacy notice

Who runs BikeRouteNow?

BikeRouteNow is my personal hobby project. For privacy questions or requests, email bikeroutenow@gmail.com.

What data is processed?

For route calculation, BikeRouteNow processes the addresses, locations or coordinates you enter. With browser permission, your current location can be used. For each route generation, the server logs the IP address, the country inferred by Cloudflare and technical request data for security, abuse prevention and troubleshooting. Your language choice requires no account.

Purpose and legal basis

Data is used to provide the requested route, map and sharing service, secure the site and improve its operation. The legal bases are performing your request, legitimate interests for security and limited aggregate statistics, and consent for analytics cookies and advertising. Your current location is requested only after you allow it in your browser.

External services

Place searches use Photon. Weather and missing elevation data use Open-Meteo. Numbered junction connections use OpenStreetMap data through Overpass. In production, route calculation runs on our own BRouter service. Map tiles are loaded directly from OpenStreetMap when a route map is shown. These providers can receive the coordinates needed for the request and technical connection data. Ko-fi opens when you follow a support link.

Analytics and cookies

We count daily page views and use of features such as route searches, preferences, downloads and sharing on our own server. These statistics contain only totals and separate category counts, without cookies, visitor identifiers, IP addresses, user agents, entered text, addresses, coordinates or shared-route IDs. We do not build visitor profiles or recognise returning visitors from these counts. They are retained for 90 days. The basis is our legitimate interest in improving the site with minimal impact on privacy. You can object by disabling Site statistics under Privacy settings; Do Not Track and Global Privacy Control also disable measurement.

Google Tag Manager loads Google Analytics with Advanced Consent Mode. Before a choice and when you refuse analytics cookies, Google receives limited cookieless measurements of page views, feature use, page language, coarse preference categories and campaign information. Analytics does not read or write analytics cookies in this state or use a persistent analytics identifier to connect visits. Google receives network and browser information when your browser connects. With your permission, Analytics uses cookies to connect visits and interactions. We remove route IDs and private URL parameters and send only the referring domain and validated campaign parameters; we do not send entered addresses, coordinates, email addresses or route contents. Advertising click IDs require advertising consent. Earlier events are not replayed when you allow cookies. Cookieless measurements can support statistical estimates; they do not reveal every visitor’s exact journey, and modelled reports depend on Google’s data thresholds.

Advertising measurement and personalised advertising have separate choices. If you allow them, Google may use cookies and interaction data to measure campaigns and create advertising audiences. Google AdSense ad spaces require advertising consent. In the EEA, UK and Switzerland, Google’s certified Privacy & messaging platform collects this choice and lists advertising vendors and purposes. Elsewhere, our own cookie controls ask for your permission once Google confirms the European message does not apply. The Google consent bootstrap loads before a choice with ad requests paused; it can store necessary consent-management information. Without a valid advertising choice, ad requests remain blocked. If the Google message is unavailable, a separate analytics-only choice does not enable advertising.

You can refuse optional cookies and continue using the planner. Use Privacy settings in the footer to change or withdraw your choice. Turning off Site statistics stops both our own aggregate counts and Google Analytics, including cookieless measurements. Do Not Track and Global Privacy Control also stop measurement and advertising. Our consent record is stored locally for up to 180 days; the Google consent platform manages its own consent record when enabled. Withdrawing analytics cookie consent clears accessible tracking cookies and returns Analytics to cookieless measurement unless Site statistics is also disabled. Withdrawal may reload the page. Third-party cookies can be removed in your browser.

Google Analytics retains event and user data for 14 months; aggregated standard reports may remain available longer. Google and other providers may process data outside the EEA under their applicable transfer safeguards. More information is available at policies.google.com/privacy and policies.google.com/technologies/partner-sites. Contact bikeroutenow@gmail.com for questions or privacy requests.

Retention and security

Unshared route searches are not stored as route records or in server logs. Shared routes expire after 90 days; expired files are cleaned up on access and at least hourly while the service is running. Saved browser preferences contain no locations and can be disabled in the planner. IP addresses used for rate limiting remain in server memory for no more than one hour. The IP address and country of a route generation are also recorded in the protected server log and retained according to the system log retention setting. External services and hosting providers may use their own logs and retention periods. The production connection is intended to be secured through HTTPS.

Your rights

You may request access, correction or deletion of personal data, object to processing or request restriction. Email bikeroutenow@gmail.com. You may also lodge a complaint with the Dutch Data Protection Authority.

Changes

This notice may change when BikeRouteNow or its services change. The latest version and date are always shown on this page.