Privacy policy

HelloDrifter (the "Site") is run by HD Maps LLC, a California limited liability company ("we" or "us"). This policy explains what information we collect when you use the Site, including our maps embedded on other websites, and what we do with it.

Information you give us

• Your account. When you sign up, we ask for your name, email address, country, and a password. You can also add a display name, profile picture, bio, city and region, sex, preferred activity, and preferred units to your profile.
• Your content. We store the routes you draw, the GPX and other course files you upload, the events, races, courses, and points of interest you add or edit, and the maps, map images, and embedded maps you create.
• Payments. Subscriptions and map image purchases are paid through Stripe. Your card details go directly to Stripe; we never see or store your full card number. We keep a record of your plan and purchases and the ID Stripe gives your customer record.
• Messages. When you use our contact form or email us, we keep your name, email address, and what you wrote so we can reply.

Information we collect automatically

• Visits and usage. When you visit the Site, we record your IP address, browser, device type, operating system, the page that referred you, and the pages and features you use (for example, loading a map or downloading a GPX file). We use this to understand how the Site is used, to count usage of embedded maps, and to improve the Site. We delete these detailed records after about a year and keep only totals.
• Sign-ins. We record when you sign in and the IP address you sign in from, to help keep your account secure.
• Approximate location. We may look up the country of your IP address to choose miles or kilometers for you. We do not use your device's precise location.
• Errors. When something goes wrong in your browser or on our servers, an error report goes to our error monitoring service. It can include your IP address, your browser, and the page you were on.

Connected apps

You can connect your account to Garmin Connect, Wahoo, or Strava under Settings > Connected apps.

• Garmin Connect and Wahoo. We store only the access keys the service gives us, and we use them only to send the courses you choose to your device.
• Strava. We store your Strava athlete ID, the access keys Strava gives us, and lists of your Strava clubs (such as each club's name, picture, and ID) and of the routes saved in your Strava account. For some older connections, we may also hold the IDs of your Strava followers who use the Site.

We do not read your activities, health data, or contacts from any of these services. You can disconnect any of them at any time under Settings > Connected apps, or from your account with that service. When you disconnect Strava, we delete the information we stored from it.

The Site no longer offers sign-in with Facebook, and we no longer get information from Facebook. If you used Facebook with the Site in the past, we still keep what we stored then: your Facebook user ID, a link to your Facebook profile picture, and the IDs of your Facebook friends who also used the Site. If you signed up with Facebook, we filled in your name, email address, and, where you shared them, your sex and location from your Facebook profile, and we may have copied your Facebook profile picture as your profile picture. To have your Facebook information deleted, contact us.

How we use your information

• To run the Site: your account, your maps and courses, exports, map images, and embedded maps.
• To process payments and manage your subscription.
• To send you email about your account and what you do on the Site, such as confirmations, password resets, receipts, and notices about events you direct.
• To send you news about the Site. Every one of these emails has an unsubscribe link, and unsubscribing does not affect account email.
• To understand how the Site is used, and to fix and improve it.
• To prevent spam, fraud, and abuse, and to keep the Site secure.
• To help you when you ask for support. Our staff may view your account to do this.
• To comply with the law.

What other people can see

Other people can see your display name and profile picture, and anything you choose to make public, such as public routes and your contributions to events. Event organizers can embed our maps of their courses on their own websites.

Advertising

We show ads from Google AdSense to visitors who are not subscribers. Subscribers do not see ads.

• Third-party vendors, including Google, use cookies to serve ads based on your previous visits to the Site or to other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to the Site and/or other sites on the Internet.
• Other ad networks that Google approves (Google calls them Authorized Buyers) also bid to show ads on the Site, and may use cookies to do so.

You can opt out of personalized advertising from Google in Google's Ads Settings, and from many other vendors at www.aboutads.info. If you opt out, you will still see ads, but they will not be based on your browsing.

If you are in the European Economic Area, the UK, or Switzerland, a message from Google asks for your choices about ads and cookies before personalized ads are shown, and lists the ad partners involved. You can change your choices at any time with the "Privacy and cookie settings" link on the page.

Analytics

We use Google Analytics to understand how people find and use the Site. It uses cookies to collect your IP address, device and browser information, and the pages you visit. If you are signed in, we send Google Analytics our internal ID number for your account, so visits from your different devices count as one person. We never send it your name or email address. You can read how Google uses information from sites that use its services, and you can opt out with the Google Analytics opt-out browser add-on.

Cookies

Cookies are small files that a website stores in your browser. The Site uses:

• Essential cookies that keep you signed in and protect your forms. The Site does not work without these.
• Our own analytics cookies that group the pages you visit into a visit, and recognize your browser when it returns.
• Google Analytics cookies, described above.
• Advertising cookies from Google and its partners, described above.
• Security cookies from Google reCAPTCHA, which protects our sign-up and contact forms from spam.

When you pay, you complete your payment on Stripe's checkout page, which uses its own cookies. You can block or delete cookies in your browser settings. If you block essential cookies, you cannot sign in.

Who we share information with

We do not sell your personal information for money. Google and its ad partners do collect information through cookies on our pages to show ads, as described under Advertising; some U.S. state laws treat that as "selling" or "sharing", and you can opt out of it as described there. Otherwise, we share your information only with service providers that help us run the Site, and only as needed for their service:

• Hosting and cloud computing: our servers, databases, file storage, and map processing.
• Payment processing, by Stripe.
• Email delivery.
• Analytics, advertising, and spam protection, by Google.
• Error monitoring.
• Map and place search services. Your browser loads maps from them directly.
• Looking up the country of an IP address.
• Garmin and Wahoo, only if you connect them and send them a course.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the Site, or as part of a merger or sale of our business.

How long we keep information

We keep your account information and content while your account is open. We delete detailed visit records after about a year. When you delete your account, we delete your personal information within a reasonable time, except for records we must keep for tax, accounting, or legal reasons, such as payment records.

Your choices and rights

• You can see and change your profile information in your account settings.
• You can unsubscribe from news emails with the link in each one.
• You can disconnect Garmin Connect, Wahoo, or Strava at any time.
• You can control cookies and personalized ads as described above.
• You can ask us for a copy of your personal information, or ask us to correct or delete it, by contacting us. We delete your account and the identifiable information in it within a reasonable time after your request.

Depending on where you live, such as the European Economic Area, the UK, or California, you may have other rights over your personal information, such as the right to object to how we use it. To use these rights, contact us. We will not treat you differently because you used them.

Is my information secure?

We store passwords only in encrypted form, and the Site uses an encrypted (HTTPS) connection. Do not share your password with anyone. We will never contact you to ask for your password. No system is perfectly secure, so we cannot guarantee that your information will never be accessed without permission. If that happens, we will tell you as soon as we can, or as the appropriate authorities direct.

Where your information is stored

We are in the United States, and we store and process your information in the United States. If you use the Site from another country, your information is transferred to the United States.

Children

The Site is not intended for children under 13, and we do not knowingly collect personal information from them. If you think a child under 13 has given us personal information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will post the new version on this page and change the date at the top. If a change is significant, we will also tell you on the Site or by email.

Have more questions?

If anything in this policy is unclear, or you have a question about your privacy, please contact us.