WherePace Privacy Policy
Last updated: 1 October 2026
This policy explains how WherePace handles data when you use its calculators, import routes, sign in with Google, save or share plans, and subscribe to the newsletter.
1. Responsibility and contact
The service operates under the WherePace brand at wherepace.com. Contact q4plan@gmail.com for privacy questions, data requests or account deletion.
2. Tools and activity files without an account
Calculators and GPX, FIT and TCX processing work without registration. Files are processed in your browser. We do not automatically send original files to Supabase or Google Analytics. Session data stays on your device while using the tools. Saved workout templates remain locally until you delete them or clear browser data.
3. Google data and its use
If you choose Continue with Google, Supabase Auth identifies you using the basic openid, email and profile permissions. Google may provide your identifier, name, email address, email verification status and profile picture. Supabase stores the identity data needed for your account and manages the session. We use this data to authenticate you, associate and retrieve your plans, and display your name. We do not request Gmail, Drive, contacts or calendar access. Signing in does not subscribe you to the newsletter. We do not sell Google user data or use it for personalised advertising.
4. Cloud plans and shared links
Only when you choose to save a plan do we send its title, route coordinates, available elevation, meeting points, paces, stops and planned times to Supabase. Plans belong to your account and are private by default. Creating a link makes a snapshot and your profile name available to anyone receiving it. Your email is not included in that snapshot. Links may be forwarded, expire after 30 days and can be disabled in My plans. You can also delete the plan. Revocation cannot remove screenshots or copies already saved by recipients. There is no live location tracking.
5. Purposes and legal bases
Account and plan data support the sign-in, storage and sharing services you request. Optional analytics and newsletters rely on consent, which you can withdraw. Technical data may also be processed to secure and operate the service and meet legal obligations. We do not make automated decisions with legal effects about you; sports predictions are illustrative calculations.
6. Newsletter
When you check the consent box and submit the form, your email and subscription choice are sent to Brevo to manage WherePace news and commercial content. The subscription is retained until you unsubscribe through an email link or by contacting q4plan@gmail.com. Minimal records may remain to honour your opt-out or meet legal obligations. This subscription is separate from Google sign-in.
7. Providers and disclosures
Supabase provides authentication and storage; Google provides Google sign-in and optional analytics; Netlify hosts the site; Brevo manages newsletters. OpenStreetMap receives map requests with connection information and the requested map area. Opening Google Maps or WhatsApp sends your chosen coordinates or message to that service. The Share menu sends content to the app you choose. Providers may process technical data such as IP addresses and security logs under their terms. We do not disclose data to third parties for their own commercial purposes.
8. Analytics, storage and transfers
Google Analytics loads through Google Tag Manager only after you accept analytics, to understand visits and improve the site. We do not intentionally send GPX files, point coordinates, form values or profile data to Analytics. Direct visits to shared links and OAuth returns do not load this analytics. Change your choice through Cookie settings. Some providers may process data outside the European Economic Area under their transfer arrangements and terms. Consult their policies or contact q4plan@gmail.com for information.
9. Retention and deletion
Saved plans remain until you delete them or request account deletion. Expiring a link does not delete the private plan. Your session is stored on your device; sign out in My plans. A temporary pre-login draft is removed when recovered; drafts older than one hour are not restored and are discarded at the next recovery attempt. Provider logs and backups may follow their own retention cycles. To delete your account and associated data, contact q4plan@gmail.com from your account email; reasonable identity checks may be needed. Removing WherePace access in your Google account does not itself delete saved plans.
10. Security, rights and updates
Authentication and database permissions restrict access to private plans. Treat shared links as private information and send them only to intended recipients. You may request access, correction, deletion, restriction, objection or portability where applicable, and withdraw consent, by contacting q4plan@gmail.com. You may complain to the relevant data protection authority, including Spain's AEPD. Changes to this policy will appear here with an updated date.