PitStopper.net

Privacy Policy

Privacy Overview

The Short Version

We don't collect your personal data. Your GPX routes and location data are processed entirely in your web browser - our servers never see or store your route information.

PitStopper.net is a client-side web application. This means that when you upload a GPX file or search for points of interest, all processing happens locally in your browser. Your route data never touches our servers, but data is sent to 3rd party servers.

What We Don't Collect

Browser Storage

PitStopper.net uses your browser's local storage (localStorage) to save your preferences and improve your experience. This data is stored only on your device and is never transmitted to our servers.

Data stored locally includes:

You can clear this data at any time through Tools > System Tools > Saved Preferences or by clearing your browser's site data.

Third-Party Services

How API Requests Work

When you search for POIs or use other features, your browser makes requests directly to third-party APIs. These requests go from your device to the service provider - PitStopper's servers are not involved in this process.

PitStopper.net uses several third-party services to provide its functionality. When you use these features, your browser communicates directly with these services:

POI Data

Overpass API (OpenStreetMap)

Used to find points of interest. Your search area coordinates are sent to query POI data.

OpenStreetMap Privacy Policy

Map Tiles

OpenStreetMap

Default street map layer.

OpenStreetMap Privacy Policy
ESRI World Imagery

Satellite imagery layer.

ESRI Privacy Statement
Thunderforest

Outdoor activity maps.

Thunderforest Privacy Policy
OpenTopoMap & CyclOSM

Topographic and cycling map layers. These use OpenStreetMap data.

Elevation Data

OpenTopoData API

Used for bulk elevation queries along your route.

Open-Elevation API

Used for individual POI elevation lookups.

Geocoding (Address Search)

Nominatim (OpenStreetMap)

Primary address search service.

OpenStreetMap Privacy Policy
Photon API (Komoot)

Fallback geocoding service.

Sunrise/Sunset Data

SunriseSunset.io

Primary service for daylight timing data.

Sunrise-Sunset.org

Fallback sunrise/sunset API.

Sunrise-Sunset.org Privacy Policy

What Data is Sent to Third-Party APIs?

When using these services, the following data may be sent directly from your browser:

We encourage you to review the privacy policies of these third-party services if you have concerns about how they handle data.

Optional Features

Komoot Route Import

If you use the Komoot URL import feature, your browser fetches the GPX file directly from Komoot's servers. PitStopper does not have access to your Komoot account.

Geolocation

The "Use My Location" feature requests your device's location through your browser's Geolocation API. This requires your explicit permission and the location data is only used locally to center the map - it is not sent to our servers.

Data Security

Since your route data never leaves your browser (except when communicating directly with third-party APIs), there's no centralised database of user routes that could be breached. Your data's security depends on:

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page. As a client-side application with no user accounts, we have no way to notify you of changes directly - we recommend checking this page periodically if you have privacy concerns.

Contact

If you have questions about this privacy policy or how PitStopper.net handles data, please contact us at hello@pitstopper.net.