Privacy Policy

Last updated: June 2026 · RouteRewind

    Summary: RouteRewind is completely free and standalone. It turns a GPX file or a route you draw into a cinematic 3D video entirely in your browser. We have no accounts, no logins, no payments, and we store none of your data on our servers — your routes never leave your device.
  

1. Data Controller

RouteRewind is operated from Greece (EU). For all privacy enquiries:

Email: info@routerewind.com

2. Data We Collect and Why

We collect the minimum data necessary to operate the service. For each item we state the purpose and the legal basis under GDPR Art. 6.

Data	Where stored	Purpose	Legal basis
GPX file contents / drawn route	Browser memory only — never transmitted to us	Generate the 3D fly-through and stats card	Contract (Art. 6(1)(b))
Photos you add (Story Mode)	Browser memory only — never uploaded	Show your photos along the route	Contract (Art. 6(1)(b))
Saved routes & settings	Your browser's `localStorage` only	Remember your saved routes and preferences between visits	Legitimate interest (Art. 6(1)(f))

We do not collect your email address, payment card details, account credentials, precise location beyond the GPS track you provide, or any behavioural / analytics data.

3. What We Never Do

Require an account or login — RouteRewind works entirely without sign-in. There is no Strava connection or any other third-party login.
Store your routes on our servers — everything is processed in your browser; your GPS data never reaches us.
Sell or rent your data — your data is never sold, licensed, or brokered to any third party, including advertisers or data brokers.
Use your data for AI / ML — your route data is not used to train, fine-tune, or inform any machine learning model.
Use cookies or tracking — no Google Analytics, no Mixpanel, no pixels, no fingerprinting.

4. Third-Party Services

Your browser contacts the following services directly. Each is an independent data controller with its own privacy policy. We do not forward your personal data to them beyond what your browser sends automatically when loading assets.

Service	Purpose	Data involved	Privacy policy
Cesium GS, Inc. (USA)	3D terrain, satellite imagery and building tiles	Your IP address (standard CDN request)	cesium.com ↗
MapTiler AG (Switzerland)	Satellite imagery tiles	Your IP address (standard CDN request)	maptiler.com ↗
OpenStreetMap / Overpass API (Germany)	Building outlines and land use data	Your IP address	openstreetmap.org ↗
Open-Meteo (Switzerland)	Historical weather data	Approximate location of your activity	open-meteo.com ↗
Netlify, Inc. (USA)	Hosting (web and serverless functions)	Your IP address (server logs)	netlify.com ↗

Data Processing Agreements: Netlify acts as our hosting provider. We have accepted their Data Processing Agreement (incorporated in their terms of service), as required by GDPR Art. 28.

5. International Data Transfers

RouteRewind is operated from the EU (Greece). Some of our infrastructure and tile providers — including Netlify and Cesium — are based in the United States. Your browser contacts them to load map assets; we do not send them your personal data.

These transfers are covered by appropriate safeguards:

Netlify has adopted Standard Contractual Clauses (SCCs) approved by the European Commission for data transfers from the EU to the US.

6. Data Retention

Data	Retention period
GPX / route data, photos, GPS tracks	Never stored server-side. Held only in browser memory while the tab is open — gone when you close it.
Saved routes & preferences	Stored in your browser's `localStorage` only. Cleared when you clear browser data.

7. Your Rights Under GDPR

If you are in the EU/EEA, you have the following rights regarding your personal data. To exercise any of them, email info@routerewind.com — we will respond within 30 days.

Right of access (Art. 15) — request a copy of the personal data we hold about you.
Right to rectification (Art. 16) — request correction of inaccurate data.
Right to erasure / "right to be forgotten" (Art. 17) — since we store none of your data on our servers, you can erase everything yourself simply by clearing your browser data (or using your browser's "clear site data" for routerewind.com).
Right to restrict processing (Art. 18) — request that we limit how we use your data in certain circumstances.
Right to data portability (Art. 20) — receive your data in a machine-readable format (JSON).
Right to object (Art. 21) — object to processing based on legitimate interest.
Rights related to automated decision-making (Art. 22) — RouteRewind does not use automated decision-making or profiling.
Right to lodge a complaint — you have the right to lodge a complaint with your national data protection authority. In Greece: Hellenic Data Protection Authority (dpa.gr) ↗. In other EU countries, contact your country's supervisory authority.

8. How to Delete Your Data

Because RouteRewind stores nothing on its servers, you are always in full control:

Close the tab — your route, photos and GPS data (held only in memory) are gone instantly.
Clear browser data — removes saved routes and preferences stored in localStorage.
Email us — for any question, contact info@routerewind.com.

9. Security

All data in transit is encrypted using TLS 1.2 or higher.
We do not store your routes, GPS data, photos, or any payment data server-side — there is nothing on our servers to breach.
GPS and route data is processed entirely in your browser and is never transmitted to us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. Continued use of the Service after the update date constitutes acceptance of the revised policy.

RouteRewind is an independent project not affiliated with Strava, Inc., or any of the third-party services listed above.

Questions? info@routerewind.com