Dolomites

Legal

Privacy policy

Last updated: 28 June 2026

This page explains what data Dolomites Planner collects when you visit, plan a route, or create an account, and how we use it. It is maintained by the site owner and reflects current practice, not an independent audit.

1. Who runs this site

Dolomites Planner is an independent project. For privacy questions or data requests, write via our contact page.

2. Data we collect

If you only browse

  • Standard request logs such as IP address, user-agent, requested URL, and timestamp, kept for about 30 days for abuse prevention.
  • Aggregated page-view counts such as URL, referrer, and country for traffic analytics, without tracking cookies.

If you create an account

  • Email address and a hashed password, or your OAuth provider identifier.
  • Account creation date, last sign-in, and your saved routes or preferences.

If something crashes

  • An error log with the error message, stack trace, URL, and your user id if signed in, used only to fix bugs.

3. What we do NOT collect

  • No advertising cookies, no third-party ad networks, and no cross-site tracking.
  • No payment information, because we do not currently sell anything.
  • No precise location tracking. The planner only uses coordinates you explicitly enter or click.

4. Third-party processors

  • Supabase — hosts account, auth, and saved routes.
  • OpenStreetMap, OpenTopoMap, Waymarked Trails — map tiles; these servers see your IP when the map loads.
  • BRouter — computes trail paths between waypoints; only coordinates are sent.
  • Google — only if you sign in with Google; then Google's own privacy policy also applies.

5. Cookies and local storage

We use an auth cookie or local-storage entry to keep you signed in. We do not use marketing or analytics cookies. Clearing browser storage will sign you out.

6. How long we keep data

  • Account data: until you delete your account.
  • Request logs: about 30 days.
  • Error logs: 90 days.
  • Aggregated analytics: indefinitely, without personal identifiers.

7. Your rights (GDPR)

If you are in the EU, EEA, UK, or Switzerland, you can request access to, correction of, or deletion of your personal data; object to processing; and lodge a complaint with your local data authority. Email us via our contact page.

8. Children

The service is not directed at children under 16 and we do not knowingly collect their data.

9. Changes

We may update this policy. Material changes will be flagged on the homepage for at least 14 days. The date above always shows the current version.