Privacy

Last updated: 25 September 2026

Map & Munch is operated from Ontario, Canada. This policy explains what happens to information you type into the planner, and it applies to this website only.

The short version

• You do not need an account. If you make one, it holds your email address and what you choose to save — your details and your logbook — and you can delete the lot yourself, immediately.
• Everything you type in the planner is processed in your own browser while you fill the form in.
• When you generate a plan, your trip details are encoded into the results link. The plan itself is calculated and drawn in your browser, but that link is a web address, so it reaches our server when the page is requested — and it may appear in ordinary server logs.
• We set no cookies, run no analytics and no advertising, and sell nothing to anyone.

What stays in your browser

• The planner form. Your height, weight, age, fitness, route, gear weights and dietary restrictions are held in the page while you work through the three steps. Nothing is sent anywhere during that.
• An unfinished plan. The form is saved to your own device’s local storage under trailfuel.draft.v1 so a refresh does not lose your progress, a group trip in progress likewise, and the last plan you did not save is held until you close the tab so we can offer to keep it. None of it leaves your device unless you choose to save, and you can see and delete all of it on the cookies and storage page.
• A GPX file you import. The file is read and parsed in your browser and is never uploaded. A GPS track is a precise record of where a person walks, and nothing about answering “how far, how much climbing” requires us to hold that. It is also not saved to your device by us — re-import it if you refresh.

What reaches our server

Three things without an account, a few more with, and we would rather spell them out than let you assume otherwise.

• Your trip, inside the results link. A plan is encoded into the address of the results page — that is what makes a plan shareable and refreshable without an account. Because the page is rendered on the server, that address travels to us with the request. It contains the figures you entered, including age, height, weight and any allergies you selected. We do not store it in a database, but it can appear in the standard request logs our host keeps.
• Your IP address and basic request details. Any web server sees these. We use the IP address transiently, in memory, to rate-limit the trail, place and wind search routes so that one script cannot exhaust the services we depend on. It is not written to a database or used to build a profile.
• Trail search text. If you use the beta trail search, the words you type are sent to our server, which asks the mapping services below on your behalf.
• Your account, if you make one. Signing in stores your email address, the time you signed in, and a session cookie (see the cookies and storage page). Sign-in is by emailed link; we never hold a password.
• What you choose to save to it. All of it optional, all of it readable only by you, all of it in a database in Canada, and all of it gone when the account goes. Your details: weight, height, age, sex, fitness, diet, any allergies you declared, your base pack weight and the water you carry — kept so the planner does not ask again. Your logbook: trips you pressed save on, each one the same encoded plan a shared link carries, with the name and any start date you gave it. A canoe trip’s plan also carries its put-in (a named place, rounded to about a kilometre) and its dates, in the link and in the logbook if you save it, and a trip with resupply carries the names you gave its pickup points. With Pro, two more: trip templates, which hold a route and the trip’s food style and are built on our server so that they never hold anyone’s body, diet or allergies; and named packs, a name with a base-pack weight and a water weight. And your pantry: foods you entered from their nutrition labels, with the allergens you ticked, and recipes made from them. A pantry food you bring on a trip is copied into that plan’s link, figures and all, so anyone you send the link to can see it. Your body and your allergies are health information. We hold them only because you asked us to, never to profile you or sell anything, and you can wipe them from your account page without deleting the account.
• A post-trip check-in, if you turn it on. Off unless you switch it on. One email a week after a saved trip’s start date, asking whether the food ran short, ran over, or came out about right. The answer is kept with a copy of the plan it is about, so the two can be compared after the engine has moved on, and is only ever published as an aggregate — never as your trip. The link in that email carries a secret that identifies the trip, so anyone you forward it to could answer for you; nobody needs to sign in.
• Your subscription, if you buy one. Stripe takes the payment on its own pages and we never see your card number. What reaches us is only what says whether the subscription is live: a Stripe customer and subscription reference, the status, the renewal date, and whether it is set to stop.

Treat a plan link as public. Anyone you send it to, and anyone they forward it to, can open it and read that plan. If your trip or your health details are sensitive, do not post the link somewhere public. Plan pages are also excluded from search engines, in robots.txt and with a no-index instruction on the page itself.

A group plan link carries the whole group. Everyone you add to a group trip has their name, weight, height and age encoded into that link, the same way your own details already were. You are sharing their information as well as yours, and they are not here to be asked — so ask them, use first names or initials if that is easier, and send the link to the group rather than posting it. Saving a group plan to your logbook keeps that same link, with everyone in it, in your account until you remove it. A template made from a group plan keeps the route and nobody in it.

Who else is involved

• Cloudflare hosts the site and processes requests on our behalf, which includes holding the ordinary server logs described above.
• Supabase hosts the account database and sends the sign-in emails, on servers in Montréal, Canada. It sees your email address and whatever you save; it acts only on our instructions.
• Stripe takes subscription payments on its own hosted pages. What you type there — card details, billing address — you give to Stripe, under its own privacy policy and not ours; it tells us only whether the subscription is live.
• Photon (Komoot) and Overpass answer the beta trail search against OpenStreetMap data, and Photon answers the put-in search on canoe trips. Your search text goes to them; your IP address does not, because the request is made by our server rather than by your browser.
• MET Norway (the Norwegian Meteorological Institute) supplies the wind forecast for canoe trips. When you look up the wind, our server sends them the put-in’s coordinates, rounded to about a kilometre, and nothing else: not your IP address, not your dates, not anything about you. Their servers are in Norway. The typical-month wind comes from Environment and Climate Change Canada figures that are built into the site, so looking those up sends nothing anywhere.
• Retailers we link to. Some product links earn us a commission. Nothing about you is passed to them, but once you follow a link you are on their site, under their privacy policy, and they will set their own cookies. Not following the link avoids this entirely.

Some of these are outside Canada, so information handled through them may be processed in another country and be accessible to that country’s authorities under its laws.

What we do not do

• No passwords, ever. No account is required to use the planner.
• No analytics, no advertising networks, no social media pixels.
• No cookies beyond the one that keeps you signed in — see the cookies and storage page, which explains why there is nothing here to consent to.
• No selling, renting or trading of personal information. There is no circumstance in which we would do this.

How long anything is kept

• Your draft: on your device until you clear it, or until your browser does.
• Rate-limit counters: minutes, in memory, and lost whenever the server restarts.
• Server logs: kept by our host for a short retention period on their standard schedule, then deleted. We do not copy them anywhere else.
• Your account: until you delete it, which you can do on your account page at any time. Deletion is immediate and removes everything saved under it, check-in answers included.
• Billing records: Stripe keeps what it must for tax and accounting law, on its own schedule, even after an account here is deleted. That is the law, not our choice.

Your choices

Most of what you would normally have to ask us for is already in your hands: your draft is deletable from the cookies and storage page or by clearing your browser data, a plan stops existing the moment you stop sharing its link, and an account is deleted from its own page, by you, with no email to us required.

Under Canadian privacy law you can ask what personal information we hold about you, ask for it to be corrected, and complain about how we handled it. If you are in the UK or the European Economic Area you may also have rights to erasure, restriction, objection and portability. Write to ctm313@gmail.com and we will answer within 30 days. Without an account the honest answer will usually be that we hold nothing tied to you; with one, it is exactly what your account page shows.

If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to your own data protection authority if you are outside Canada.

Children

This is a planning tool for adults. It is not directed at children under 13, and we do not knowingly collect anything from them. A young person’s trip should be planned by the adult responsible for it — the calorie model is built on adult physiology and should not be applied to a child.

When this changes

Accounts, saved details, the logbook, group trips, trip templates, named packs, canoe trips, resupply and the pantry are live now, and this page was rewritten for each before it shipped rather than after. Anything to come that stores something new about you will be described here first, and the date at the top will change. Material changes will be flagged on the site rather than made quietly.

Contact

Privacy questions, corrections and complaints: ctm313@gmail.com, or through the contact page.