Privacy Policy

Last updated: June 3, 2026

This policy explains what GR8 Tracks ("we", "us") collects and how we use it. By using the service you agree to this policy.

What we collect

• Account info. If you create an account, we store your email address and the public credential (passkey) used to sign you in. We never receive or store a password — passkeys keep your private key on your device.
• Location. When you choose "use my location," your device shares your approximate coordinates so we can center the map and find nearby trails and gauges. We use it to build a search area; we don't sell it or build advertising profiles.
• Recorded trips. If you start tracking a trip, we record the route you travel — a series of points (coordinates, elevation, speed, and time) — and save it to your account so you can view your trips and stats. On the mobile app you can allow background tracking so recording continues while your screen is off; the app shows an ongoing notification while it records. You choose when tracking starts and stops, and you can delete any trip.
• Saved areas. Offline map packs you request are tied to your account so you can download them.
• Messages. If you use our contact form, we store the name, email, and message you send so we can reply.
• Usage & technical data. Standard server logs (IP, request, user agent) for security and reliability.

Third-party services & data

Maps, conditions, and elevation come from public and third-party providers — including USGS (water data and elevation), the U.S. Forest Service, OpenStreetMap, Recreation.gov, Montana Fish, Wildlife & Parks, OpenTopography, and Esri (satellite imagery). To fetch data for the area you're viewing, your map view (a bounding box) or specific coordinates — for example, to look up elevation — may be sent to these services, subject to their own privacy terms.

Our contact form uses Google reCAPTCHA to reduce spam, which shares some data (such as your IP address and interaction signals) with Google under Google's Privacy Policy and Terms. We also rely on service providers to run GR8 Tracks, including cloud hosting and storage (offline packs and uploads are stored on Cloudflare R2) and an email provider used to send messages.

Cookies

On the web we use a single, essential session cookie to keep you signed in; the mobile app uses a secure access token stored on your device instead. We don't use advertising cookies. Note that Google reCAPTCHA, used on the contact form, may set its own cookies under Google's control.

Your choices

You can deny or revoke location access at any time in your browser or device settings (this also stops trip recording). You can delete individual trips from your account. You can delete your account by contacting us, which removes your email, passkey credentials, saved areas, and recorded trips.

Contact

Questions about privacy? Get in touch.