Bike Route Planner

Privacy policy

Last updated: 14 September 2026

Bike Route Planner is a private, invite-only web app operated by Ionut Tecu. It helps invited cyclists plan Road, Gravel, and VTT itineraries. This policy explains what we collect and why.

What we collect

• Account details from Google or GitHub sign-in: name, email address, and profile photo if the provider sends them.
• Sign-in sessions (a hashed session token, time, browser, and IP) stored in this project's Google Cloud Firestore in the EU.
• Authenticator app secrets and hashed backup codes if you enable two-factor authentication.
• Generated itineraries (origin, stops, preferences, and the route). Each cyclist's history is private to that account. The operator cannot open or browse another cyclist's itineraries.
• Anonymous-style usage events (for example that an itinerary was generated), without advertising identifiers.
• If you use the contact form: your name, email, topic, message, and the IP used to send it, so we can reply.

How we use it

We use this data only to run the app: sign you in, keep you signed in, save your rides, send invite emails, send a new-sign-in email only if you turn that on in Account, answer contact-form messages, and keep the service secure. We do not sell personal data and we do not use it for advertising. Approximate map position may be inferred from your IP so the planner can open near you; precise location is used only if you tap the locate button and allow it in the browser.

Maps and route data

To draw rides and suggest official Swiss bike routes, the app calls third-party map services. Place names you type, coordinates of a planned itinerary, and (if you allow it) your approximate or precise location may be sent to those services so they can return a map, a cycleable line, an address match, or official route numbers. We do not send your account email to the map providers.

• Google Maps Platform: the planner page loads the Maps JavaScript API with a browser key restricted to this site. Our servers use a separate key (never sent to the browser) for Geocoding, bicycle Directions, and Static Maps — address search, the ride line, GPX/TCX, and share/PDF maps. Place names you type and coordinates of a planned itinerary are sent to Google so those APIs can return a map, a cycleable line, or an address match.
• Open-Meteo elevation, to estimate climb and descent along the planned track for HTML/PDF reports and riding-time estimates.
• Weather forecasts for each route day and representative stage location: official MeteoSwiss Open Data for locations in Switzerland (via the federal geo.admin.ch STAC API), and Open-Meteo for other European locations and as a fallback. The route coordinates or stage place name are sent to the relevant provider. Forecasts are shown in the generated route summary, public HTML share, and PDF.
• The Swiss federal geodata infrastructure geo.admin.ch (swisstopo / Federal Roads Office FEDRO): SwitzerlandMobility Veloland and Mountainbikeland layers. The browser loads official numbered-route map tiles. Our servers also send the planned track so we can list intersecting official route numbers (for example Veloland route 1) in the itinerary, share page, PDF, and device export. Source: SwitzerlandMobility / FEDRO.
• Opening “Open in Google Maps” is a browser navigation to Google Maps with the planned origin, stops, and destination. We do not send your account email to Google Maps.

Those providers process the request under their own terms. Official route numbers and tiles are public geodata; they can still be incomplete or out of date.

Who processes it

• Google Cloud (hosting, Firestore, and Google sign-in) in the EU region we configured.
• Google AI Studio / the Gemini API, to generate itineraries from the ride search you submit (origin, destinations, duration, and preferences). This is not your Google sign-in.
• GitHub, if you choose GitHub sign-in.
• Resend, to send transactional email from send.tecu.ch, including contact-form messages to the operator.
• The map, elevation, weather, and geodata providers listed above, only for routing, tiles, geocoding, climb estimates, daily forecasts, and bike-route overlays.

Sharing

Saved itineraries are private to your account. Other cyclists, including the operator, cannot see your route history. Trip summary links you create (/s/…) are public: anyone with the link can open the HTML page, PDF, GPX, and Garmin TCX. Do not include information you do not want shared.

Retention

Account and route data stay until you delete a ride from your history, ask us to delete your account, or an admin disables the account. Session cookies expire after idle and absolute timeouts. Contact-form emails are kept only as long as needed to handle the request.

Your choices

You can sign out at any time. You can review recent sign-ins and turn new-session emails on or off on your Account page. You may also ask for a copy or deletion of your account data with the contact form on this page. Google and GitHub remain responsible for how they handle sign-in on their side.

EU/EEA and Swiss users: we process this data to provide the service you request (contract / legitimate interest in running a private club tool). Contact us for questions or complaints; you may also contact your local data protection authority.

Home · Privacy policy · Terms of service