1. Introduction

GPX.tours ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our route planning and GPX file management service.

2. Data collection

Analytics data

We use Google Analytics 4 to understand how users interact with our service. This analytics implementation is configured to be privacy-focused and GDPR-compliant:

• Cookieless tracking - no cookies are stored on your device
• IP addresses are anonymized to protect your identity
• No personally identifiable information is collected
• Data is only used in aggregated, anonymized form for improving our service

Technical data

We collect minimal technical information necessary for the service to function:

• Browser type and version (for compatibility)
• Language preference (stored locally in your browser)
• Error logs (to improve service reliability)

3. How we process your data

Local processing

Most data processing happens locally in your browser:

• GPX files are processed entirely in your browser
• Route calculations and modifications happen locally
• Your files are never uploaded to our servers unless you explicitly choose to share them

Optional sharing

When you choose to share a route, we temporarily store minimal data:

• Route waypoints and metadata
• Shared routes are automatically deleted after 30 days
• No personal information is associated with shared routes

4. Your rights

Under GDPR and other privacy regulations, you have the following rights:

• Right to Access: Request information about data we process
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Data Portability: Export your data in a machine-readable format
• Right to Object: Object to processing of your personal data

5. Data security

We implement appropriate technical and organizational measures to protect your data:

• All data transmission is encrypted using HTTPS
• We practice data minimization - collecting only necessary information
• Most processing happens locally, reducing data exposure
• Automatic deletion of shared data after 30 days

6. Third-party services

We use the following third-party services:

• Google Analytics 4: Privacy-focused analytics with anonymized IP addresses and no cookies
• OpenStreetMap: Map data provider - no personal data is shared
• Mapbox: Map rendering service - only map tiles are requested

7. Contact us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us via the Contact form on the website.

8. Policy updates

We may update this privacy policy from time to time. We will notify users of any material changes by posting the updated policy on our website. Continued use of our service after changes constitute acceptance of the updated policy.