Privacy Policy — TrailBivvy web app
Version of 20 October 2026. This policy covers the TrailBivvy web app at app.trailbivvy.com. The iPhone app and the website trailbivvy.com have their own policy at trailbivvy.com/privacy.
At a glance
- No TrailBivvy account, no analytics, no advertising, no tracking, no cookies and no third-party scripts.
- Your trips, waypoints, photos, reports and settings stay in your browser on your device. None of this data is sent to TrailBivvy.
- If you subscribe to TrailBivvy Pro, Link, Stripe’s payment service, processes the payment. TrailBivvy receives your e-mail address and the state of your subscription, never your card details.
- Weather forecasts come from MET Norway through TrailBivvy’s relay, which passes on only a position rounded to about 1 km and an elevation — never your IP address.
Who is responsible
LyteFast SAS, 60 rue François Ier, 75008 Paris, France (RCS Paris 988 054 227), publisher of TrailBivvy. E-mail: stephane.sprauer@gmail.com.
Data that stays on your device
| Data | Where it is kept | What it is for |
|---|---|---|
| Your current position | In memory while the app is open | Map, navigation, Sleep Tonight, Safety |
| Recorded trips, waypoints, photos, reports, imported routes | Your browser’s storage (IndexedDB) | Your own records |
| Downloaded maps and trail data, cached forecasts | Your browser’s cache | Offline use |
| Settings, and the e-mail address you typed on the paywall | Your browser’s storage | Your preferences; offering the address again when you restore |
| Your TrailBivvy Pro token (Stripe customer and subscription identifiers, subscription status and dates, signed by TrailBivvy) | Your browser’s storage | Checking your subscription without a connection |
Your browser asks before TrailBivvy can use your position, and only while the app is open. Tracks and waypoints leave your device only if you export or share a GPX file yourself. Clearing the site’s data in your browser deletes all of this.
Data that leaves your device
Map tiles. The map requests images of the visible area from the official map service of the country (swisstopo, IGN, basemap.at, BKG, IGN España, Kartverket, USGS) and, where none applies, from OpenStreetMap’s tile servers. As with any online map, the provider sees the requested area and your IP address. Downloading a trek requests the tiles of its whole route corridor.
Weather. The app asks app.trailbivvy.com for the forecast at a position rounded to two decimal places (about 1 km) and an elevation rounded to 10 m. The request is forwarded to TrailBivvy’s weather relay and from there to MET Norway (the Norwegian Meteorological Institute) without your IP address or anything that identifies you; MET Norway logs the request with its coordinates in Oslo, Norway.
Protected areas in Switzerland. When online, the app may ask the Swiss federal geoportal (geo.admin.ch) which protected areas lie in the visible map area or at a point you check.
Subscription (Stripe and Link). When you subscribe, the app sends your e-mail address to TrailBivvy’s server, which opens a Stripe Checkout payment page. The subscription is sold through Link, Stripe’s payment service, as merchant of record: Link and Stripe collect your payment details, name and billing address and process the payment, the tax, renewals, receipts and refunds under their own privacy policies (link.com/privacy, stripe.com/privacy). If you ask Link to delete your data, Stripe also cancels the subscription. Stripe keeps a customer record with your e-mail address, your country and your subscription; TrailBivvy can see this record to answer questions and handle refunds. To check your subscription, the app occasionally sends your Pro token to TrailBivvy’s server, which reads the subscription’s state from Stripe.
Restoring on another device. If you ask for a sign-in link, TrailBivvy’s server looks up your address at Stripe and, if it has a subscription, sends you an e-mail through Resend (our e-mail delivery provider). Links and transfer codes are stored only as a one-way hash, and expire after 30 and 15 minutes.
Server records. For support, TrailBivvy’s server keeps, for 400 days, the last subscription event Stripe reported for each customer (customer identifier, event type, status and time). It keeps no positions and no tracks.
Hosting. The app and its server run on Cloudflare, which necessarily processes your IP address to deliver the app and protect the service.
Purposes and legal bases
Providing the app and the subscription you ask for (performance of a contract); keeping records required for accounting and tax (legal obligation); answering support questions and preventing abuse such as repeated free trials (legitimate interests).
How long data is kept
On your device: until you delete it or clear the site’s data. At Stripe and Link: for as long as they and accounting rules require. Restore codes: at most 30 minutes. Subscription event records: 400 days.
Your rights
You can ask for access to, correction or deletion of the data TrailBivvy holds about you, object to its processing or ask for a copy, by writing to the address above. You can also complain to your data protection authority — in France the CNIL (cnil.fr).
Changes
If this policy changes, the new version is published here with its date.
See also the Terms of Sale.