Reading a guide, playing its audio, and exporting a route to your maps app require no account and no email address. If that is all you do, we hold no record that identifies you.
Signing in is only needed to save a route, mark stops as visited, buy credits, or use anything you have paid for.
| What | Why | How long |
|---|---|---|
| A Google account identifier | So we recognise you next time | Until you delete your account |
| Your email address and name from Google | Receipts, and to answer you if you write | Until you delete your account |
| Your language preference | To show the site in the right language | Until you delete your account |
| A session identifier in a cookie | To keep you signed in | 60 days, or until you sign out |
| Routes you saved, stops you marked visited | That is the feature | Until you delete them |
| Credit balance and purchase history | Accounting, and so you can spend what you bought | 7 years (tax records) |
A random identifier in your browser's local storage, so that a route export or an affiliate click can be counted without knowing who you are. It is not linked to a name, it does not follow you to other websites, and clearing your browser data removes it.
We record what happened — a route was exported, a guide was played, a booking link was clicked — with the page it happened on. We deliberately do not store your IP address or your full browser user-agent string. We want to know which positions on the page work, not who you are.
Google, when you choose to sign in with Google. We receive your account identifier, email and name; Google sees that you signed in to G20X. We never receive your Google password.
Stripe, when you buy credits. Stripe handles the card details — they never reach our servers. We receive a payment identifier and the amount. Stripe's own privacy policy governs what they hold.
Cloudflare, which hosts this site, serves the audio files and runs our database. They process requests on our behalf.
Travel booking partners, when you click a booking link and leave our site. From that point their policies apply, not ours. We see that the click happened; we do not see what you booked or paid.
Ask what we hold on you and we will send it: [email protected]. Ask us to delete your account and we will, including your saved routes and visited stops. Purchase records are kept where tax law requires it, with nothing attached that identifies you beyond the transaction.
Sign out at any time from your account page — that deletes the session, it is not just an expiry. Or simply use the site signed out; almost everything works.
G20X is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, write to [email protected] and we will remove it.
When we add a feature that touches your data, we update this page in the same release. The date at the top is the date of the last change.
Questions, access requests, deletions, complaints: [email protected]. A person answers.