Recent routes stay on this device. The list in the sidebar lives only in this browser and is never uploaded.

Saved routes are end-to-end encrypted. When you save a route to your account, it's scrambled on your device with a key derived from your password before it's sent. We — and anyone who ever got hold of the database — only see unreadable data. We can't tell where you live or travel.

Your password never leaves your device. It logs you in and unlocks your routes, but we only ever receive a one-way "verifier", never the password itself. Because of that, we can't recover your routes if you forget it — a password reset clears your saved routes and starts fresh. Pick a strong password: its strength is what protects you.

What we do store: your email address (to sign you in), and that you saved some routes and when — never their contents.