Privacy Policy

Last updated: June 26, 2026

1. Who we are

RideLink is a community map for e-bike riders, built and operated as an independent project. Contact: app.ridelink@gmail.com.

2. What we collect

• Anonymous device ID. A random string is generated in your browser the first time you visit and stored in localStorage. It's how the map knows which markers are yours. We never tie it to a real-world identity.
• Location. If you allow it, we use your phone/browser's geolocation to center the map and let you drop pins. Coordinates are stored only on markers you create.
• Your activity. Markers you create (rideouts, police reports), optional 3-letter rider names, optional rideout times/destinations, multiplayer session links you generate, friend requests, and messages you send. We never store your real name.
• Settings preferences. Theme, time format, map-visibility window, and similar choices are stored in your browser's localStorage and never sent anywhere.
• App account (mobile). The RideLink mobile app uses an email address and password to create your account so your profile and posts persist across devices. The web demo stays anonymous (device ID only).
• Push notification token. If you enable notifications in the mobile app, your device's push token is stored so we can deliver alerts — for example when someone @-mentions you in a community, or a rideout starts. You can turn notifications off (including @-mentions specifically) in Settings.
• Advertising data. Content pages on the website may load Google AdSense, and the mobile app may use Google AdMob. Google may process cookies, device identifiers, IP address, browser/app information, and ad interaction data depending on your device and Google settings.
• Aggregate logs. Our database provider may keep request logs for reliability and abuse prevention.

3. What we don't collect

• No real names and no phone numbers. The mobile app uses your email only to sign you in and secure your account — it's never sold or used for ads; the web demo collects no email at all.
• No background location — we only read your spot when the app is open and you've allowed it.
• No RideLink-built advertising profile of you. We don't fingerprint you across sites, and we don't sell your RideLink account or map data.

4. How we use it

• To show you, and other riders, where rideouts and police sightings are happening near you.
• To let multiplayer-rideout joiners see the host's pin and connect to it.
• To let friends see your last spot on the map (only if you're sharing — see Map Visibility).
• To moderate posted content using an AI safety filter (see "Moderation" below).
• To send you notifications you've opted into — such as a community @-mention or a rideout starting. You can opt out per-type in Settings.
• For basic analytics on whether the app is working (uptime, error counts) — not on individual users.

5. Sharing & processors

• Supabase hosts our database and real-time sync.
• CARTO & OpenStreetMap serve the map tiles.
• Netlify hosts the website.
• Google AdSense / Google AdMob may serve ads on content/feed surfaces and process ad-related identifiers under Google's advertising policies.
• OpenAI sees the text of posts/comments only for moderation. It does not see your ID or location.
• We don't sell your data, and we don't share it for cross-context targeted advertising.

6. Retention

Map markers automatically expire (police: 30 minutes; rideouts: 24 hours). Messages persist until you delete them or request account deletion where available. You can clear your website device ID at any time by clearing site data in your browser. Mobile app account deletion instructions are available on our Data Deletion page.

7. Map visibility (friends)

If you add friends, you can choose whether they see your last spot on the map: always, for a few hours, or never (hidden). The control lives in the Friends panel's gear icon. Your choice applies before anyone is shown your location.

8. Moderation

Post and comment text is screened by an automated safety filter before it's saved. Content flagged as hateful, harassing, or otherwise harmful is blocked at submission. We do not store moderation logs against your real identity.

9. Children

RideLink isn't directed at children under 13 and we don't knowingly collect data from them. If you believe a child has used the app, email us and we'll delete what we can identify.

10. Your rights

You can clear website data tied to your browser by clearing site data, or request account-linked app deletion using the Data Deletion page. If you're a Texas resident, see Do Not Sell My Personal Information for your rights under the Texas Data Privacy & Security Act (TDPSA).

11. Security

Connections to our database are encrypted (HTTPS/TLS). Because RideLink uses no traditional account/password, your "identity" lives in your browser — please keep your device locked.

12. Changes

If we change this policy in a meaningful way, we'll update the date at the top and announce it in the app's changelog.

13. Contact

Questions, deletion requests, or privacy concerns: app.ridelink@gmail.com.