Privacy Policy

GPSDotWatch is a live GPS race-tracking platform — a website and the CycLocator mobile app. This page lays out exactly what we collect, why, who can see it, and how to make it leave.

Last updated 2026-06-22.

The short version

• We collect what's needed to run live tracking for an event, and not much else.
• You can watch events and ride without an account. Signing in is optional and uses Apple or Google — we never see a password.
• While you're tracking a ride, the app sends your GPS position (including in the background) so your event can follow you on the map.
• On the public map, rider dots are anonymous — your name isn't shown to spectators. It's revealed only if you send a distress/SAG signal, and to the event's director/SAG staff.
• We don't sell data, run ads, or run third-party analytics.

What we collect

If you sign in (optional)

• Your Apple or Google account identifier and, if you share it, your email, so we can recognize you on return visits and tie your events/roles to your account.
• Your name from Apple/Google, kept privately on your profile — we do not use it as your public map name (that's one you set yourself).

If you ride or join without an account

• A random device identifier we generate to keep your session, with no real-world identity attached.
• The display name and bib number you type in when joining an event. There's no verification — put whatever you want shown.

Location data (only while you're actively tracking)

• GPS points — latitude, longitude, accuracy, and timestamp — sent at the interval the event uses while you have tracking turned on for that event.
• This includes background location on mobile: once you start tracking, the app keeps sending your position even when it isn't on screen, so your crew and the event can follow you during the ride. See the dedicated section below.
• If you're offline, points are buffered on your device and uploaded when you reconnect.
• Tracking stops when you stop it (or stop the event). We don't collect your location when you aren't tracking.

Operational data

• Standard server logs — request method, path, status, timing, and IP address — for debugging and abuse prevention.

Background location

The CycLocator app requests background location permission. We use it for one purpose: to periodically send your position to your event while you're tracking a ride, so spectators, your crew, and event safety staff (SAG) can see where you are even when the app is in the background or your screen is off. We don't use background location for advertising, profiling, or any purpose unrelated to tracking the ride you chose to join. You can stop it any time by stopping tracking, and you can revoke the permission in your device settings.

Who can see your data

• Spectators / the public map: anonymous dots only — position and pace color, no name.
• If you send a distress or SAG request: your position is shown on the map and your display name is revealed to event staff (director/SAG/checkpoint) so you can be helped. Whether the public also sees your name follows the event's display setting (anonymous events keep it staff-only; events that show rider names show it like any rider).
• Event director and safety staff: see the full roster of display names and rider positions for their event (including riders flagged off-course), so they can run the event and respond to problems.
• Other riders: see the same anonymous public map everyone else does.

How we use it

• To show live positions on the event map and route, in real time.
• To let event organizers and SAG staff run the event and respond to distress signals.
• To keep your account, roles, and event history (if you signed in).
• To keep the service running and to prevent abuse.

Sharing & third parties

• Apple and Google — only if you choose to sign in (Sign in with Apple / Google OAuth). We receive your account id, and (if you share it) your email and name; we never receive your password.
• OpenStreetMap — supplies the map tiles; your browser/app requests them to draw the map.
• Hosting — the service runs on our own server infrastructure.
• We do not sell your data, share it with advertisers, or run third-party analytics/ad SDKs.

Retention & deletion

Location points and event records are retained to keep event maps and history available. Account data is kept while your account exists.

You can delete your account in the app at any time (Profile → Delete account). This permanently removes your personal information — name, email, profile details, and your link to Apple/Google. Your past ride points are kept as part of each event's record but are anonymized: the name shown on them becomes [Deleted User]. You can also request deletion here (in-app or by email).

Your choices

• Watch and ride anonymously — signing in is optional.
• Change your display name in the app at any time.
• Turn tracking off whenever you want; revoke location/background-location permission in your device settings.
• Delete your account and personal data in the app (Profile → Delete account), or request it via the contact address below.

Children

GPSDotWatch isn't directed at children under 13, and we don't knowingly collect their data. If a participant is a minor, a parent/guardian should manage their use.

Changes

We may update this policy as the service evolves. We'll revise the "last updated" date above when we do.

Contact

Questions or data requests: privacy@gpsdotwatch.com.