Bike Route Planner
Privacy policy
Last updated: 9 September 2026
Bike Route Planner is a private, invite-only web app operated by Ionut Tecu. It helps invited cyclists plan Road, Gravel, and VTT itineraries. This policy explains what we collect and why.
What we collect
- Account details from Google or GitHub sign-in: name, email address, and profile photo if the provider sends them.
- Sign-in sessions (a hashed session token, time, browser, and IP) stored in this project's Google Cloud Firestore in the EU.
- Authenticator app secrets and hashed backup codes if you enable two-factor authentication.
- Generated itineraries (origin, stops, preferences, and the route). Each cyclist's history is private to that account. The operator cannot open or browse another cyclist's itineraries.
- Anonymous-style usage events (for example that an itinerary was generated), without advertising identifiers.
- If you use the contact form: your name, email, topic, message, and the IP used to send it, so we can reply.
How we use it
We use this data only to run the app: sign you in, keep you signed in, save your rides, send invite emails, send a new-sign-in email only if you turn that on in Account, answer contact-form messages, and keep the service secure. We do not sell personal data and we do not use it for advertising. Approximate map position may be inferred from your IP so the planner can open near you; precise location is used only if you tap the locate button and allow it in the browser.
Maps and route data
To draw rides and suggest official Swiss bike routes, the app calls third-party map services. Place names you type, coordinates of a planned itinerary, and (if you allow it) your approximate or precise location may be sent to those services so they can return a map, a cycleable line, an address match, or official route numbers. We do not send your account email to the map providers.
- OpenStreetMap contributors, and FOSSGIS e.V. bicycle routing (OSRM), for the base map and the ride line.
- Photon (Komoot) and OpenStreetMap Nominatim, for address search and reverse geocoding.
- The Swiss federal geodata infrastructure geo.admin.ch (swisstopo / Federal Roads Office FEDRO): SwitzerlandMobility Veloland and Mountainbikeland layers. The browser loads official numbered-route map tiles. Our servers also send the planned track so we can list intersecting official route numbers (for example Veloland route 1) in the itinerary, share page, PDF, and device export. Source: SwitzerlandMobility / FEDRO.
- Google Maps only if you tap “Open in Google Maps”; that request is made by your browser to Google, not by our servers on your behalf.
Those providers process the request under their own terms. Official Swiss route numbers and tiles are public geodata; they can still be incomplete or out of date.
Who processes it
- Google Cloud (hosting, Firestore, Vertex AI itinerary generation, and Google sign-in) in the EU region we configured.
- GitHub, if you choose GitHub sign-in.
- Resend, to send transactional email from send.tecu.ch, including contact-form messages to the operator.
- The map and geodata providers listed above, only for routing, tiles, geocoding, and official Swiss bike-route lookup.
Sharing
Saved itineraries are private to your account. Other cyclists, including the operator,
cannot see your route history. Trip summary links you create (/s/…) are public:
anyone with the link can open the HTML page, PDF, GPX, and Garmin TCX. Do not include
information you do not want shared.
Retention
Account and route data stay until you delete a ride from your history, ask us to delete your account, or an admin disables the account. Session cookies expire after idle and absolute timeouts. Contact-form emails are kept only as long as needed to handle the request.
Your choices
You can sign out at any time. You can review recent sign-ins and turn new-session emails on or off on your Account page. You may also ask for a copy or deletion of your account data with the contact form on this page. Google and GitHub remain responsible for how they handle sign-in on their side.
EU/EEA and Swiss users: we process this data to provide the service you request (contract / legitimate interest in running a private club tool). Contact us for questions or complaints; you may also contact your local data protection authority.