Privacy policy
Data collected
We collect the following data: email address (when creating an account), GPX tracks you import or record, anonymized browsing data (pages visited, duration). In the OpenRando mobile app, when you explicitly start recording a hike, the app records your precise GPS position, including in the background (screen off or app in the background), in order to trace your route. This recording is started and stopped by you, indicated by a persistent notification for its entire duration, and the resulting track is stored in your account (Supabase, EU) where you can delete it at any time. On the website, real-time navigation runs exclusively in your browser and your position is not transmitted to our servers. We never use your location for advertising purposes and never share it with any third party.
Use of data
Your data is used to: provide the service (displaying your tracks, favorites, history), improve user experience through anonymized traffic analysis (PostHog), send essential communications related to your account. We never sell your data to third parties.
Cookies
OpenRando uses essential cookies for site operation (authentication, language preferences). We also use PostHog for audience analytics and Google AdSense for advertising on blog and explore pages. You can configure your cookie preferences in your browser settings.
Third-party services
We use the following third-party services: Supabase (database and authentication, EU), Amazon Web Services (hosting, eu-west-1), PostHog (audience analytics), Google AdSense (advertising), Mapbox (mapping). Each of these services has its own privacy policy.
Your rights
Under GDPR, you have the right to access, rectify, delete and port your personal data. You can also object to the processing of your data or request processing restrictions. To exercise these rights, contact us at contact@openrando.com. We will respond within 30 days.
Data retention
Your personal data is retained as long as your account is active. If you delete your account, your personal data will be deleted within 30 days. GPX tracks made public may be retained in anonymized form for the benefit of the community.