Privacy Policy

Moto-Tracks · Last updated: 22 June 2026

Moto-Tracks is a motorcycle navigation and route-planning service ("the Service"), available as a website and as a mobile app. This policy explains what personal data we collect, why, who we share it with, and the choices you have. We collect only what the Service needs to function.

The data controller responsible for your personal data is Moto-Tracks. You can reach us about privacy at privacy@moto-tracks.com.

Data we collect

• Account information — your email address and a display name when you create an account. If you sign in with Apple, Google, or GitHub, we receive a provider identifier and (where you allow it) your email and name. Apple "Hide My Email" relay addresses are supported and treated like any other email.
• Location — precise GPS location while you use route planning, turn-by-turn navigation, or ride recording. On mobile, navigation may use location in the background so guidance continues with the screen off. Location is used to provide the routing and navigation features; we do not sell it.
• Your content — routes you save, rides you record (GPS track, distance, duration, elevation, notes), and any waypoints or preferences you set.
• Feedback — if you send us feedback through the in-app Rider Feedback form, we store your message (linked to your account so we can reply) and email it to the developer.
• Technical & diagnostic data — your IP address (used transiently for rate limiting and abuse prevention, and to derive your approximate, city-level location so the map can open near you on first load); crash reports, which we use to keep the Service stable (these are not linked to your account, and we work to strip personal data from them — though a crash report can occasionally include technical context, such as an error message, that contains data you entered or your location); and, when you leave the anonymous-analytics setting enabled, anonymous aggregate usage events (no personal data, not linked to your account). The anonymous-analytics setting can be turned off in the app's settings; crash reporting stays on so we can find and fix crashes quickly.

How we use your data

• To provide routing, navigation, ride recording, and account features.
• To send transactional email (email verification, password reset).
• To keep the Service secure and reliable (rate limiting, debugging crashes).

Service providers

We share the minimum data necessary with providers that operate parts of the Service on our behalf:

• Hetzner — hosting of the Service and its database (EU data centres).
• Cloudflare R2 — encrypted, off-site database backups (the backup is encrypted before it leaves our server).
• Apple, Google, GitHub — only if you choose to sign in with them.
• TomTom — live traffic data for routing. We send the map area you're viewing (which can reflect your approximate location while navigating); we never attach your account, name, or saved data.
• Resend — delivery of email: account verification, password reset, your feedback messages, and notifications to our moderators when you report a route.
• Sentry — crash reporting (not linked to your account; we strip personal data where we can, though a crash report may occasionally include technical context).
• postcodes.io — UK postcode lookups. If you search a UK postcode, we send that postcode to postcodes.io to find its location; other place searches stay on our own infrastructure.
• Mapping, general place search, and points-of-interest data are served from our own infrastructure (OpenStreetMap, Overture Maps, and self-hosted search), so those place searches do not send your queries to a third-party geocoder. The one exception is UK postcode lookups (postcodes.io), above.

Public sharing

Routes are private by default. If you mark a route as public, it becomes visible to other riders in the community list and via a shareable link, shown alongside your display name. You can make a route private again at any time.

Public content is moderated. Riders can report objectionable routes and block other users; reported content is reviewed and removed where it breaches our Terms of Use, which set out a zero-tolerance policy for objectionable content and abusive behaviour.

Data retention & your rights

We keep your data while your account is active. You can edit your display name, delete individual routes and rides, and delete your entire account from within the app (Settings → Account → Delete account, or the web sidebar). Deleting your account removes it immediately; it is recoverable for a grace period of 30 days by signing back in, after which it becomes eligible for permanent erasure and is purged from our active systems by a routine cleanup job that runs regularly (shortly after the 30 days, not necessarily on the exact day). Separately, encrypted off-site backups are taken on a rolling cycle and each backup is kept for about 35 days from when it was made — so a backup captured before your account was purged can still hold its (encrypted) contents until that backup rolls off, roughly 35 days after the purge. These backups are for disaster recovery only and are never used to restore an individual account.

You can also download a complete copy of your data (Settings → Account → Download my data, or the web sidebar): a ZIP containing a JSON file with your account details, saved routes, recorded rides, reports you've filed, riders you've blocked, and feedback you've sent, plus a GPX track for each recorded ride. The export never contains passwords, security tokens, or any other person's details.

If you are in the UK or the EU, you also have the right to lodge a complaint with a data-protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EU it is the data-protection authority in your country of residence.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal data from them.

Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Contact

Questions about this policy or your data? Email privacy@moto-tracks.com.