Privacy & data

Accounts are optional

You can plan without signing up. When optional account saving is available, Clerk handles sign-in and holds the email or Google profile you choose to use. PawStops stores an internal account identifier and the Clerk user identifier to associate trips you explicitly save. Signing in is not marketing consent, and we do not add you to Travel-Ball.com or Natural Waterscapes mailing lists.

What we store when you plan a trip

When you plan a trip we save your start, destination, dates, preferences, and itinerary. New trips require an ownership key held by the browser that created them for viewing, changes, and deletion. Older trips remain viewable by link until their owner chooses Make trip private; that blocks future link access but cannot recall downloaded copies. Saving a trip to an account retires its guest ownership key and removes this browser's offline copy. Account trips require a connection. For trips kept on this device, an optional offline save stores the itinerary here. It is not encrypted storage, and copies on a disconnected device cannot be remotely erased.

Your location

The live features — “Near me”, Driving Mode, “wrap up in X hours”, and replanning from where you are — use your device's GPS. Your position stays in your browser for map display unless you take an action that needs the server: when you replan or ask for wrap-up hotels, your coordinates are sent to our server to compute the new route, and a replan is saved to that trip's revision history. We never track your location in the background — it's only read while a live feature is turned on.

Services we rely on

To build a trip we send the places, coordinates, and route you're working with to third-party services, each under its own privacy policy:

Geocoding, routing, points of interest and map tiles © OpenStreetMap contributors, via OSRM, Nominatim and Overpass.
Hotel names, ratings and pet-friendly signals from Google Places.
When the charging directory is enabled, EV route searches send route coordinates to the Alternative Fuels Data Center API operated by the National Laboratory of the Rockies. Your saved EV profile, email and account identifier are not sent. Station records may be cached for six hours; they do not report live charger availability.
Weather uses Open-Meteo first, with the U.S. National Weather Service as backup. Sampled route coordinates are sent for forecast lookup; your account identifier and email are not sent. Forecasts may be cached for 30 minutes.
Hotel booking links go to Expedia.
Optional sign-in uses Clerk and the identity provider you choose. Trip locations and itineraries are not sent to Clerk.

Affiliate links

Our hotel “Book” and “Browse” links are affiliate links. If you book after following one, we may earn a commission at no extra cost to you. It never changes which hotels we show you or how they're ranked — ranking uses only your own brand, star and rating preferences.

Deleting a trip

On the home screen, your recent trips (saved only on this device) each have a trash button. Deleting removes the trip and its history from our database. If you clear this browser's storage you lose the ownership keys and access to private trips. A trip URL cannot recover them. For trips saved to an account, sign in and use My trips to open or delete them. Deleting your Clerk account sends PawStops a signed deletion notification; when received, we remove its saved trips and revisions. A minimal account identifier tombstone remains to prevent delayed requests from restoring a deleted account. After this privacy update, reconnect and save your itinerary offline again; older offline copies are removed when the updated app activates.

Usage analytics

To understand how Paw Stops is used and to keep it working, we record usage on the website and in the iOS and Android apps in our own database. We do not use an external analytics service or advertising cookies, and we do not build advertising profiles from these records.

What you do: the pages you open (the type of page only, so every itinerary is recorded as the same trip page), how long a page is open in the foreground, how far you scroll, which tools you use (such as Driving Mode or the weather view), actions such as planning a trip or opening a hotel booking link, and the domain of links you follow to other sites.
How the app performs: page-speed measurements, and error messages from the app with web addresses, email addresses, ids and long numbers removed before they are sent.
Where a visit came from: the domain of the site that linked you here and any campaign tags in that link (utm_ values limited to letters, numbers and simple punctuation).
Your device, in general terms: device type, operating system and browser family (the full browser identification string is not kept), screen-width range, language, and the app or site version.
Approximate location: your country and state or province, which our hosting provider derives from your connection. Your IP address, city and postal code are not stored with these records.

A random device id stored in this browser or app, and a random id for each visit, connect this activity across visits, and some records include a trip id that links to route information. This is pseudonymous data, not anonymous data. Analytics never accepts free-text hotel names, addresses, travel dates, edit keys or email addresses, and it is not linked to your sign-in account.

Detailed usage records are deleted automatically after 14 months. We keep daily totals, such as the number of visits from each country on a given day, which contain no device, visit or trip ids. Clearing browser storage removes this browser's random ids but does not erase records already made, and deleting a trip does not delete its earlier usage records. Contact us with questions about stored data.

Your choices: if your browser sends the Global Privacy Control signal, Paw Stops records no usage analytics. You can also turn usage analytics off for this browser or app with the switch on this page. The service records described below continue, because they are needed to run and protect Paw Stops.

Protecting the service

Our hosting service processes IP addresses to deliver requests and help protect the service. Paw Stops also uses an IP-derived identifier for request limits. This is separate from usage-event properties and can still distinguish requests from the same network. Hosting and upstream services may process connection information under their own policies. These operational identifiers should not be understood as anonymous merely because an address is transformed.

To spot outages and slow responses, we also record, for each request to our servers, which kind of request it was, whether it succeeded and how long it took, and for calls our servers make to the data providers listed above, which provider was called, whether it answered and how long it took. These records contain no IP address, device id, trip id or location, and are deleted after 14 months.

Contact

Questions about your data? Email [email protected].