Privacy Policy

Last updated: 17 March 2026

Path2Anywhere ("we", "us", or "our") operates the website path2anywhere.com. This page explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We collect the following information when you create an account or use our tools:

• Email address — used to identify your account and send account-related communications
• Password — encrypted using bcrypt via Supabase Auth; never stored in plain text and never accessible to us
• Google account details — if you sign in with Google, we receive your name, email address, and profile picture from Google OAuth
• Usage data — we record the number of times you use our tools per day (a count and date only) to enforce daily usage limits
• Subscription status — if you hold a paid plan, we store your plan type and validity period

We do not collect your route searches, locations, or any journey data you enter into our tools. All route calculations are processed in real time and not stored.

2. How We Use Your Information

• To authenticate you and maintain your session
• To enforce daily usage limits and manage your subscription tier
• To send transactional emails (account confirmation, password reset)
• To improve our tools and understand how they are used at an aggregate level

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Cookies and Local Storage

We use browser localStorage to:

• Store your session token so you remain signed in between visits
• Cache anonymous usage counts (for users who are not signed in)
• Cache fuel price data locally to reduce network requests

We do not use advertising cookies or third-party tracking cookies beyond Google AdSense (see section 5).

4. Data Storage and Security

Your account data is stored securely on Supabase, a hosted PostgreSQL platform based in the EU. Supabase enforces Row Level Security (RLS) — meaning your data is only accessible to you and cannot be read or modified by other users.

Passwords are hashed with bcrypt before storage. We have no mechanism to recover or view your plain-text password.

5. Third-Party Services

Our tools rely on the following third-party services:

• Google Maps API — used to calculate routes and distances. Your search inputs are sent to Google. See Google's Privacy Policy.
• Supabase — authentication and database. See Supabase's Privacy Policy.
• Google AdSense — we display ads on some pages. Google may use cookies to personalise ads. See Google's Privacy Policy.

6. Data Retention

We retain your account data for as long as your account is active. Usage count records are retained for 90 days, after which they are automatically deleted. You may request deletion of your account and all associated data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the data we hold about you
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, please contact us using the details below.

8. Children's Privacy

Path2Anywhere is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The "Last updated" date at the top of this page will always reflect the most recent revision.

---