Privacy Overview
Last Updated: 15 January 2026
The Short Version
Your route data stays private. Your GPX routes and location data are processed entirely in your web browser - our servers never see or store your route information. We use privacy-focused analytics which you can opt out of below.
PitStopper.net is a client-side web application. This means that when you upload a GPX file or search for points of interest, all processing happens locally in your browser. Your route data never touches our servers, but data is sent to 3rd party servers.
What We Don't Collect
- GPX Files - Your route files are processed entirely in your browser and are never uploaded to our servers
- Location Data - We don't track where you are or where you're planning to go
- Personal Information - We don't require accounts, logins, or any personal details
- Tracking Cookies - PitStopper does not use cookies to track you
Website Analytics
Privacy-Focused Analytics
We use Umami, a privacy-focused, self-hosted analytics system. Unlike traditional analytics, Umami does not use cookies, does not track users across websites, and does not collect personal information.
Our analytics help us understand which features are most used so we can focus our improvements. We collect:
- Page views - Which pages are visited
- Feature usage - Which buttons and features are clicked (e.g., "Export GPX", "Search POIs")
- Referrer - How you found our site
- Browser/device type - To ensure compatibility
- Country - General geographic region (not precise location)
We do not collect:
- IP addresses (anonymised before storage)
- Personal identifiable information
- Your route or GPX data
- Cross-site tracking data
Opt Out of Analytics
If you prefer not to be included in our analytics, you can opt out by clicking the button below. This sets a flag in your browser's local storage that tells Umami to skip tracking your visits.
You can also manually opt out by opening your browser's developer console (F12) and running: localStorage.setItem('umami.disabled', 1);
Browser Storage
PitStopper.net uses your browser's local storage (localStorage) to save your preferences and improve your experience. This data is stored only on your device and is never transmitted to our servers.
Data stored locally includes:
- Your preferred distance units (km/miles)
- Theme preference (light/dark/auto)
- Language preference
- Saved projects and presets
- POI cache (to reduce API calls)
- Dismissed help dialogs
- Analytics opt-out preference
You can clear this data at any time through Tools > System Tools > Saved Preferences or by clearing your browser's site data.
Third-Party Services
How API Requests Work
When you search for POIs or use other features, your browser makes requests directly to third-party APIs. These requests go from your device to the service provider - PitStopper's servers are not involved in this process.
PitStopper.net uses several third-party services to provide its functionality. When you use these features, your browser communicates directly with these services:
POI Data
Used to find points of interest. Your search area coordinates are sent to query POI data. PitStopper operates its own Overpass server which is used where possible; public Overpass servers are used as fallback.
OpenStreetMap Privacy PolicyMap Tiles
Default street map layer.
OpenStreetMap Privacy PolicySatellite imagery layer.
ESRI Privacy StatementOutdoor activity maps.
Thunderforest Privacy PolicyTopographic and cycling map layers. These use OpenStreetMap data.
Elevation Data
Used for elevation queries along your route and for POI elevation lookups. PitStopper operates its own Open-Elevation server which is used as the first preference; public servers are used as fallback.
Fallback service for bulk elevation queries along your route.
Geocoding (Address Search)
Primary address search service.
OpenStreetMap Privacy PolicyFallback geocoding service.
Sunrise/Sunset Data
Sunrise, sunset, dawn and dusk times are calculated locally in your browser using the SunCalc JavaScript library. No external API calls are made for this data - all calculations happen on your device.
What Data is Sent to Third-Party APIs?
When using these services, the following data may be sent directly from your browser:
- Geographic coordinates - Bounding boxes or point coordinates for POI searches
- Search terms - When using address search
- Map view coordinates - To load map tiles for the area you're viewing
- Your IP address - As with any internet request, your IP address is visible to the service
We encourage you to review the privacy policies of these third-party services if you have concerns about how they handle data.
Optional Features
Komoot Route Import
If you use the Komoot URL import feature, your browser fetches the GPX file directly from Komoot's servers. PitStopper does not have access to your Komoot account.
Geolocation
The "Use My Location" feature requests your device's location through your browser's Geolocation API. This requires your explicit permission and the location data is only used locally to center the map - it is not sent to our servers.
Data Security
Since your route data never leaves your browser (except when communicating directly with third-party APIs), there's no centralised database of user routes that could be breached. Your data's security depends on:
- Your browser's security
- Your device's security
- The security of the third-party APIs you interact with
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected on this page. As a client-side application with no user accounts, we have no way to notify you of changes directly - we recommend checking this page periodically if you have privacy concerns.
Contact
If you have questions about this privacy policy or how PitStopper.net handles data, please contact us at hello@pitstopper.net.