Privacy
Last updated October 24, 2026
NightRoutes keeps as little as it can. No ads, no tracking across other sites, and nothing is ever sold.
What we store
- Your account
- Your username and password (stored as a one-way hash by our database host, so nobody can read it). An email only if you add one; it's used for signing in and password resets, and never shown to anyone.
- Your profile
- What you choose to add: photo, car, bio, accent color, name style and units. Public.
- Routes you share
- The line, its name, vibe, best time and the city it passes through. The first and last 300 m are cut off by default so your home stays private, and only the trimmed line is ever uploaded. Public once a moderator approves it.
- Comments, check-ins, follows
- Comments, “I drove this” check-ins and who you follow. Public.
- Ratings
- Your stars on each route. Only the average and the count are public; nobody else sees how you rated.
- Your garage
- The routes you save. Only you.
- Drives you log
- The path, distance, time driven, start time and the hour you started (for the Night owl badge). The path and times are only ever visible to you. Other people only see your totals: km driven, number of drives and longest drive, on your profile and the leaderboard. No speeds are stored.
- Sign-in attempts
- The IP address and username of sign-ups, failed sign-ins and failed account deletions, kept for 24 hours to stop password guessing.
- Reports
- When you report something, the report is only visible to moderators.
Your location
NightRoutes only uses your location when you ask it to:
- Drive. While you're recording a drive, GPS points are kept on your phone. They're uploaded only when you tap Save, and only you can see them. In the app, recording keeps going with the screen locked, and your phone shows that location is in use the whole time (a notification on Android, the location indicator on iPhone). Unless you turn on Auto-record (below), nothing is tracked when you aren't recording.
- Auto-record (phone apps, off unless you turn it on). The app uses your phone's motion detection and occasional location updates to notice when you start driving, then records the drive the same way, with a notification (Android) or the location indicator (iPhone) showing. Recorded drives stay on your phone until you review them; nothing is uploaded unless you tap Save. Turn it off on the Drive page at any time.
- Near me. Moves the map to where you are. Your location stays in your browser and isn't sent to us.
Services we use
- Supabase stores the database, accounts and profile photos.
- Vercel hosts the website. Like any web host, it sees your IP address when you visit. Its Web Analytics counts page views (which page, the referring site, country, browser and device type) to tell us how many people visit. It uses no cookies and doesn't identify you or follow you across sites.
- CARTO and OpenStreetMap provide the map tiles your browser loads.
- Photon (by Komoot) handles the city search box: what you type is sent to it.
- OpenRouteService snaps the points of a route you're drawing to roads.
- BigDataCloud looks up the city from a point in the middle of a route you share (never its ends).
- GitHub hosts the app downloads.
Deleting your data
Delete single drives from the Drive page, and your routes and comments from the route itself. To delete everything, open your profile, tap Edit profile and then Delete account. Your account, profile, photo, routes, drives, garage, check-ins, comments, follows and ratings are deleted right away. Copies can stay in our database host's encrypted backups for a few days until those roll over.
Other things
- Your browser keeps your sign-in, an unsaved drive and an unfinished route on your device. Signing out clears your sign-in.
- NightRoutes is for drivers. Don't make an account if you're under 13.
- If this policy changes, the date at the top changes too.
Questions
Use Report on any route or comment and a moderator will get back to you. Back to the map.