Terms & Privacy

Last updated 2026-07-06

GPX Vault is a small, independently-run tool for storing and organizing GPS track and waypoint data you choose to upload. This page explains what happens to your data in plain language, without legal boilerplate you'd need a lawyer to parse.

What we store

• Your email address, username, and a securely hashed (not readable, not reversible) copy of your password.
• The tracks and waypoints you choose to save, and the folder names you organize them into.
• Basic account activity needed to keep the service secure (e.g. failed login attempts, to block brute-force attacks).

What we don't do

• We don't sell, share, or analyze your location data for any purpose other than showing it back to you.
• We don't track you across other sites, run ads, or use third-party analytics.
• We don't have an advertising business, so there's no incentive to build a profile of you. There's simply nothing like that here.

Cookies

We use one strictly-necessary cookie to keep you signed in, and, only if you check "Keep me logged in," a second cookie so you don't have to log in again for 30 days. Neither is used for tracking or advertising, and we don't use any third-party cookies.

Services we rely on

A couple of pieces of the app come from outside services:

• Map tiles from OpenStreetMap, so the map has streets and terrain to show your tracks on. Loading the map means your browser requests tiles directly from OpenStreetMap's servers.
• Web fonts from Google Fonts, for the text you're reading right now.

Outbound email (verification and password reset messages) and encrypted backup storage both run on infrastructure we own and operate ourselves, not a third-party email or cloud storage vendor.

Your control over your data

• You can delete any saved track, waypoint, or folder at any time from within the app.
• You can download any track or waypoint you've saved back out as a GPX file whenever you want. Your data isn't locked in.
• You can update your username and password any time from your Profile page.
• You can permanently delete your entire account and all associated data from your Profile page. This is immediate and cannot be undone.

Data retention

We keep your data for as long as your account exists. If you delete a track, waypoint, or folder, it goes to Trash and can be restored until you empty it or permanently delete it, at which point the underlying file is removed from storage. If you delete your account, everything (your account record, every saved item, every stored file) is removed immediately, not just hidden. Nightly encrypted backups roll over daily, with each night's backup replacing the last, so we don't keep a long trail of historical backups sitting around indefinitely.

Children's privacy

GPX Vault isn't directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has created an account, contact the site owner and it will be removed.

Storage & security

Data is stored on a dedicated server, isolated from other services, behind a firewall, with encrypted backups. As with any online service, no system is perfectly secure, so don't upload anything you wouldn't want stored on a small independent server.

Changes

If this policy changes in a way that matters, we'll update the date above. Questions or deletion requests: contact the site owner.