Who the controller is
The data controller is DIGITAL WOLF s.r.o., company ID 07253451, registered at Hlavní 341/102, 664 31 Lelekovice, Czech Republic. For privacy matters contact us at [email protected]. We have not appointed a data protection officer because the law does not require one for us.
Using the editor without an account
The GPX editor works without signing up. When you load a GPX or KML file, we store it on our server together with derived route data (distance, elevation gain, start, end, map bounds) and a random identifier your browser remembers so you can see your uploaded routes. Routes uploaded without an account are deleted automatically after 24 hours. FIT and TCX files are converted right in your browser and are not sent to the server until you save them as GPX yourself. Editing happens in the browser; only what you explicitly save or share is sent to the server.
Account and projects
When you register we process your e-mail address, your password (we store only a cryptographic hash), your chosen language, time zone, premium status and its validity, and registration and sign-in dates. With an account we keep your routes without expiry, your saved editor projects (route, points of interest, segments, timing data and settings) and routes you uploaded before signing in and attached to the account. The legal basis is the performance of the service contract.
Shared routes
If you create a share link, the route is accessible to anyone who has the link, without signing in. Do not share links to routes that reveal your home or other sensitive places. You revoke sharing by deleting the route.
Technical data and security
With every request we process the IP address, browser type and time of the request in server logs (kept for 30 days) and in error reports sent to Sentry, so we can detect faults and abuse. Sign-in, registration and password reset may be protected by Cloudflare Turnstile, which evaluates technical browser signals and the IP address. The legal basis is our legitimate interest in a secure, working service.
Maps, routing and elevation
While you use the editor, your browser contacts third-party services directly: map tiles from Freemap.sk, OpenStreetMap and Esri (satellite layer), the BRouter service when snapping a route to roads (route coordinates are sent), Open-Meteo when filling in elevations (point coordinates are sent) and the Photon place search (the typed text is sent). These services see your IP address and the coordinates sent; we never send them personal data from your account.
Cookies, analytics and advertising
Analytics and marketing tools (Google Tag Manager, Google Analytics) are loaded only after you consent in the cookie bar. Partner coupons and banners in the editor follow your consent to marketing cookies; their impressions and clicks are counted anonymously, without any link to your account, and passed to our partner site runilo.cz. Details are in the Cookie Policy.
Payments
Premium membership will be charged through the Stripe payment gateway. You enter card details directly with Stripe; we never see or store them. From Stripe we receive only a customer identifier, the subscription status and its validity. Until payments launch we process no payment data at all.
E-mails
Transactional e-mails (such as confirmations or security notices) are sent through Brevo from [email protected]. We do not send a newsletter; if we introduce one it will be opt-in with an unsubscribe link in every message.
AI coach
The AI coach is not publicly available yet. When it launches we will add here which training data it processes, how the Strava connection works and which AI model providers process the data, and we will ask for your consent where required.
Recipients and transfers outside the EU
Our processors: Hetzner Online (hosting, data centres in Germany), Brevo (e-mail, EU), Sentry (error reporting), Cloudflare (Turnstile), Google (analytics only with consent), Stripe (payments) and runilo.cz (anonymous partner-offer statistics). Some of them may process data in the USA; such transfers rely on an adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. We do not sell data.
How long we keep data
Routes without an account: 24 hours. Account, routes and projects: until you close the account. Server logs and error reports: 30 days. Accounting records for payments: as required by law (usually 10 years). Anonymous impression and click statistics contain no personal data.
Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability, to object to processing based on legitimate interest and to withdraw consent at any time (change cookies via Cookie settings in the footer). We will delete your account and all data on request sent from the registered e-mail address to [email protected]. You may lodge a complaint with a supervisory authority: in the Czech Republic the Office for Personal Data Protection (uoou.cz), elsewhere in the EU your national authority.
Children
The service is not intended for anyone under 16. If we learn that we processed a younger child's data without a guardian's consent, we delete it.
Changes to this policy
We may update this policy, in particular when launching new features (payments, AI coach). The date of the last change is shown in the header; we inform account holders of material changes by e-mail or in the app.