Privacy information

Who is responsible

The data controller for this website is The operator of the LE GEEK RIDER website and service.

We do not publish personal email addresses or phone numbers on the site. For privacy requests (access, erasure, objection, etc.), use our Contact form and select the privacy topic.

Your account and routes

When you sign in, account data and saved routes are stored on our servers. A free account is required for some planner features (such as Google Maps import and GPX download). Temporary planner state may remain in your browser until you leave or refresh the page.

What we process

Account and profile data — email address, username, preferences, and authentication data when you register or sign in (via our authentication provider).

Trip purchases — email used at checkout, purchase records, access tokens, and download activity for self-guided trips.

Planner and saved routes — waypoints, route metadata, and files you save while signed in.

Operator and designer data — business profile fields, tour listings, and trip content submitted through Operator Studio or Trip Studio.

Payments — Stripe processes card payments; we receive payment status, amounts, and limited billing metadata, not full card numbers.

Communications — if you use the contact form, we process the details you submit so we can reply.

Maps and routing — map tiles, geocoding, and routing requests may be sent to third-party providers when you use planner features.

Security and abuse prevention — server logs, rate limiting, and anti-spam checks may process IP addresses and technical identifiers for a limited time.

Analytics (cookies) — with your consent, we load Umami Analytics to collect aggregated, cookie-based usage statistics. The analytics script does not load until you accept the cookie banner.

Legal bases (GDPR)

Contract — to provide accounts, deliver purchased trips, and operate features you request.

Legitimate interests — to secure the service, prevent fraud and abuse, improve reliability, and understand aggregated usage, balanced against your rights.

Consent — for non-essential analytics cookies, where required.

Legal obligation — where we must retain or disclose data to comply with law.

Processors and sharing

We use trusted service providers (processors) such as hosting/database, authentication, email delivery, payments (Stripe), media hosting, maps, and analytics (when consented). They process data only on our instructions and under appropriate safeguards.

Trip designers and tour operators may see limited data needed to fulfil a listing or support request (for example purchase notifications where configured). Guided tour bookings happen on operator websites, which have their own privacy notices.

Retention

We keep account and purchase records while your account is active and as needed for legal, tax, and dispute purposes. Server logs are kept for limited operational periods. Browser-side data remains until you clear it.

Your rights

Depending on your location, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability where applicable. Use the Contact form (privacy topic) to exercise these rights. You may also lodge a complaint with your local supervisory authority.

International transfers

Some providers may process data outside the EEA. Where this occurs, we rely on approved safeguards such as Standard Contractual Clauses or equivalent mechanisms, as applicable.

Children

The service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided data, contact us via the Contact form.