Privacy Policy

1What we keep

If you only open pages

You don’t need an account, and we don’t ask who you are. Like every website, our servers see your internet address when a page loads, and our hosting’s request logs keep it for 30 days. We use it only to keep AdventureLive running and to stop abuse. We don’t use analytics, advertising trackers or tracking cookies.

If you make an account

• Your name and email address, and how you sign in: Google, or your email and a password. Your password is handled by Google Firebase, our sign-in service; we never see it.
• The 6-digit code we email to confirm your address, kept only in scrambled form (an HMAC) for its 15 minutes. To stop guessing, wrong tries are counted against a scrambled form of the address, and the count is deleted after two days.
• Your choices: your units, and your time zone (from your browser or your trips) so our tips arrive in the morning where you are.
• An account ID that links your account to your trips.

Your trips

What you plan: each trip’s name, what you’re doing, its start and end, its time zone, a summit height if you add one, who can see it, whether storm warnings to your inReach are on, and its legs. A leg can have a route (from a GPX, FIT or TCX file, or a link you bring in), its start and end, the place names at each end, and how you travel it.

What we don’t collect

• Your phone’s location. AdventureLive has no phone app: positions come only from the trackers you link.
• Your contacts, health data or activity history (unless you bring in a route from Strava, see section 8).
• Payment details. AdventureLive is free.

2Your trackers

You choose to link a tracker in My trackers. That’s your consent for us to read it, and you can remove it at any time.

• What we keep to read it: for a Garmin inReach, your MapShare name and its password if you set one; for a SPOT, your shared page’s feed ID and its password if you set one; for Garmin LiveTrack, your own AdventureLive address (it starts with the letter a, at live.livedot.me) and the latest session link Garmin emails to it, which we read for up to 24 hours. They’re kept on our server only. Followers never see them, you see them masked, and our logs never hold them.
• When we read it: only while one of your trips is live, and once when you choose Link and test it. An inReach at most every 4 minutes, a SPOT at most every 2½ minutes, and a LiveTrack session about once a minute. Never on other days.
• What we take from it: your positions (the time, the place and the height), and the messages your tracker sends. Check-ins, such as SPOT’s OK or a message you type, are shown on your trip page. A HELP message, its cancel, an inReach emergency if the feed shows one, and a typed message in words like “hurt” or “injured” are kept from followers (see section 4).
• How long: the positions we read are deleted 7 days after we receive them. The line you travelled, your last position and your check-ins are kept with the trip, so it can be followed and looked back on, until you delete the trip or your account. HELP messages and the like are kept for 90 days.
• Test it tells you when your tracker was last seen and near which town. To find the town, the position, rounded to about 1 km, goes to Komoot’s Photon place-name service.
• Positions are never used for analytics or advertising, and never sold.

3Following and who can see you

Each trip has its own setting, and you can change it at any time:

• Findable: anyone with your link, and your trip is listed in AdventureLive’s Live now while you’re out, with your name, the trip’s name, its link and when you were last seen. Never a place.
• Link only: only people you send the link to.
• People I approve: people open your link and ask to follow.

What followers see: your name, the trip’s name, its legs and their routes, where you are and the line you’ve travelled, when you were last seen and by which tracker, your check-ins, your progress, and the weather where you are. Never your email address, your tracker’s feed ID, MapShare name or password, or your LiveTrack address.

Following without an account: a follower just opens the link. We don’t ask who they are, and the trip page keeps nothing in their browser beyond remembering they’ve seen our cookie notice. Trip pages tell search engines not to list them.

Asking to follow (People I approve): a follower signs in with Google or with a sign-in link we email them. We keep their name and email address, when they asked, and your answer, and we show you their name and email, in the trip’s People who asked card and in an email to you (section 9), so you can decide. That’s all their account holds, and they get none of our tips. Their request goes when you remove it, when the trip or either account is deleted.

Your livedot address opens your trip only while it’s live and Findable (section 7).

Adventure for a cause: if you paste a fundraising link, in Account or on a trip, followers see its name, its picture, the page’s web address, a button to it and your line on why, on the trips and pages that already show you (on a People I approve trip, only the people you approve). To read the name and picture, the family’s shared server (Windline’s) opens the page once and keeps a copy of the picture; nothing about you is sent to the page. Your one cause is the same on AdventureLive, Windline, RunFast and your livedot link, kept against your email address. We never handle the money: whatever a follower gives goes to the fundraising site, under its own terms. Links are checked now and then, and a link someone reports is looked at by a person. When you remove your cause or delete your account, it goes; trips that have ended keep its name without the button.

4Home contacts

In Home contacts you can name up to 5 people, with their names and email addresses. Please ask them first: you need their permission to give us their details.

• Kept on our server only, never shown to followers, and used only for the emails below. They stay until you change them or delete your account.
• When we email them: when your SPOT sends HELP on a trip, and again if you cancel it; when you type a message on a trip in words like “hurt” or “injured”; and if Garmin’s feed ever shows an inReach emergency, which it usually leaves out. At most one email of each kind every 30 minutes.
• What the email holds: your name, what happened, the time, the place on a map, your words, and your trip’s page.
• An SOS isn’t ours. It goes from your device to Garmin Response (inReach) or SPOT’s emergency response centre, who alert rescue services and tell the emergency contacts you set with Garmin or SPOT.
• A home contact who no longer wants our emails can tell you, or email hello@adventurelive.me, and we’ll remove them.

5The weather and the map

• Planning: to give each leg its forecast or its typical weather, points along the route, with the times you’ll reach them, go to the livedot family’s forecast server at windline.tech (ours), which asks Apple Weather and reads ten years of Copernicus ERA5 records. Map positions and times only: nothing about who you are.
• Your trip page: the weather where you are comes from Apple Weather, the Copernicus Marine Service and NOAA’s GFS model (through UCAR). We send them map positions only, and keep their answers by area and hour so that many followers cause one request.
• Place names and heights: when you add a route, the places at its start and end go to BigDataCloud and Komoot’s Photon to find town names, and AWS Terrain Tiles supply heights when a route has none.
• The map is drawn from OpenFreeMap’s map tiles and AWS Terrain Tiles, with MapLibre’s code loaded from unpkg. Fly the route runs in your browser. Like any website, these services see your internet address when they answer.

6Weather by message

When you send “wx” from your inReach to your AdventureLive address, Garmin emails us your message, your position and a link to reply through. The email arrives through the email service on live.livedot.me, run on Cloudflare.

• We use your position to work out the weather and answer through Garmin’s reply link. We don’t keep your message or your position.
• We keep how many answers you’ve had today, the address it came from, and the latest reply link with when we got it. If you turn on Storm warnings to my inReach for a trip, we use that link for up to 7 days to send a warning, at most 2 a day.

7Your livedot address

If you choose a livedot address (a handle, such as livedot.me/thandi), it’s kept in livedot’s list of handles on Windline’s server (windline.tech, ours), which keeps it for the whole livedot family.

• What’s kept: the name, which of your livedot family accounts hold it, when you chose it and when you last changed it. Never your email address.
• One address across the family: to link your accounts, our servers check whether another livedot app has an account with the same verified email address. Your email address goes only between our servers, for that check.
• Claim limits: so nobody can claim names in bulk, each new claim counts against your browser and your internet connection. For that, your browser keeps a random ID (al-device, see section 10), and we keep only scrambled forms of it and of your internet address.
• What visitors see: your trip, while it’s live and Findable. Otherwise, only your livedot page.
• The rules for handles are in our Terms of Use.

8Strava, Ride with GPS and komoot

When you add a route to a leg, you can bring it in from Strava, or paste a Ride with GPS or komoot link.

• What AdventureLive reads from Strava: the list of your saved routes (each one’s name, distance, climb and date), and, for the routes you pick, the route itself. Only when you open the list or pick routes. AdventureLive never changes anything on Strava, never reads your activities, and uses what it reads for nothing else: not for analytics, advertising or AI.
• One Strava app for the family: Windline, RunFast and AdventureLive connect to Strava as one app, livedot, so Strava’s screen says livedot and lists the permissions the family’s apps ask for. AdventureLive uses only one of them: reading your routes, private ones too.
• What’s kept: the access Strava gives us (which ends after about 6 hours), your Strava athlete ID and the permissions you gave, on our server only, never sent to your browser. Never your Strava name. A route you pick becomes a leg of your trip, like a file you upload: followers see it, and it’s kept until you delete the trip or your account.
• To disconnect: choose Disconnect Strava when you add a route, or remove livedot in Strava under Settings → My Apps (that disconnects it from the whole livedot family). AdventureLive deletes its connection straight away; legs you’ve already added stay.
• Strava may monitor and collect usage data about how livedot’s apps use Strava’s API, and may use it for any business purpose, as Strava’s API terms allow.
• Ride with GPS and komoot: we read the route at the link you paste, as that service shares it. Nothing about your account there is kept.

9The emails we send

We send email through Resend, from hello@adventurelive.me. Password reset emails come from Google Firebase.

• Your code: the 6-digit code that confirms your email address.
• Five tips after you confirm your address: the first about 20 minutes later, then at 8:00 your time on days 2, 4, 7 and 14. A tip you no longer need is skipped (for example, the one about trackers once you’ve linked one). They stop for good once one of your trips goes live, or when you choose Stop these tips: one click, no sign-in. We keep which tips we sent, when, and the time zone we used.
• Home contacts’ emails, as section 4 describes.
• Someone asked to follow your trip: on a trip shared with people you approve, when someone asks, we email you their name and email address, with an Approve and a Decline button for each person waiting. At most one email about each person, and at most one every 10 minutes for a trip. Each button is a signed link for that one answer, and it works for 7 days. It opens a page where you confirm, so nothing changes just because the link was opened, and it doesn’t sign you in. We keep which people we’ve emailed you about, in scrambled form, and when, until the trip is deleted. When you approve someone, we email them once that you said yes, with the trip’s link on livedot.me. Nothing is sent when you decline.
• Emails about your account, your livedot address and your trackers, for example when we can’t read your LiveTrack.

We never send newsletters or marketing from other companies.

10Cookies and storage

AdventureLive only uses the storage it needs to sign you in and run the app. No analytics, no advertising, no tracking cookies. AdventureLive doesn’t set any cookies of its own: it keeps a few small items in your browser’s storage, listed here. None of them is optional, so there’s nothing to switch off; the notice we show once only says so.

If you choose Continue with Google, Google’s sign-in window uses Google’s own cookies, under Google’s privacy policy. To remove everything AdventureLive keeps in your browser, sign out and clear your browser’s data for adventurelive.me.

11Services we use

AdventureLive runs on a few providers who handle data on our behalf, under their own security and privacy terms. We send each only what its job needs.

• Google Firebase and Google Cloud: sign-in, the database, our servers and the website. Our database and servers run in Europe (Belgium and the Netherlands). Our hosting’s request logs are kept for 30 days.
• Resend: sending our emails. Google Firebase sends password reset emails.
• Cloudflare: the email address on live.livedot.me that receives Garmin’s LiveTrack and inReach emails for us, and livedot.me, which passes Strava’s answer back to us when you connect.
• Windline’s server (windline.tech, ours): the family’s forecast and historic weather, and livedot’s list of handles.
• Apple: Apple Weather for forecasts.
• Copernicus: the Copernicus Marine Service (read from its public data stores) for the sea, and the Copernicus Climate Change Service (ERA5) for typical weather. Map positions only.
• NOAA GFS, through UCAR’s THREDDS service: the wind and cold at height. Map positions only.
• Garmin and SPOT: we read the feeds you link, and answer weather by message through Garmin.
• Strava, Ride with GPS and komoot: only when you bring in a route from them.
• Map, place and font services: OpenFreeMap draws the maps, AWS Terrain Tiles supply heights, BigDataCloud and Komoot’s Photon find town names, unpkg serves the map’s code, and Google Fonts serves our fonts. We send them map positions only, and like any website they see your internet address when they answer.

Because these providers work around the world, your information is stored and handled outside South Africa, mainly in Europe. We don’t sell or rent your information, and we don’t share it with advertisers. If a sponsor appears on our pages, it receives no information about you.

12How long we keep it

• Your account, your trips and their routes and lines: until you delete them or your account.
• Positions read from your tracker: 7 days after we receive them. The line and check-ins stay with the trip.
• Your linked trackers and home contacts: until you remove them or delete your account. A LiveTrack session link is read for up to 24 hours.
• HELP messages and the like: 90 days.
• Your 6-digit code: 15 minutes. The count of wrong tries: two days.
• Strava’s access: about 6 hours, and the connection until you disconnect.
• Weather by message: the latest reply link is used for up to 7 days.
• Hosting request logs: 30 days.
• Your livedot address: while you have it; when you delete your account, the name is held for 90 days with no account linked, then freed.

13Deleting your account

Sign in, go to Account, choose Delete my account and type DELETE. You can also email hello@adventurelive.me from the address on your account, and we’ll do it for you.

It deletes, for good: your trips with their legs, routes, lines, check-ins and links; your live sessions and the positions in them; your linked trackers, your LiveTrack address and your HELP messages; your home contacts; the people you approved, and your own requests to follow; your Strava connection; your tips and weather-by-message records; your email code; your profile and your sign-in. Your livedot address stops at once.

To remove one trip, open it and choose Delete trip. Its legs and its link go at once.

14Your rights

Wherever you live, you can ask to see the information we hold about you, correct it, have it deleted, or receive a copy, and you can object to how we use it. This includes your rights under South Africa’s POPIA, the EU and UK GDPR, and California’s CCPA. Email hello@adventurelive.me and we’ll respond within 30 days.

If you’re unhappy with our answer, you can complain to South Africa’s Information Regulator (inforeg.org.za), or to your local data protection authority.

15Children

AdventureLive isn’t aimed at children under 13, and we don’t knowingly create accounts for them. Opening a trip page needs no account. Our Terms of Use ask anyone aged 13 to 17 to have a parent’s or guardian’s permission to make an account; South Africa’s POPIA counts everyone under 18 as a child. If you think a child has made an account, tell us and we’ll delete it.

16Changes and contact

If we change how we handle your information, we’ll update this page and the date at the top. If a change is significant, we’ll tell account holders by email first.

AdventureLive is made and run by Cross Constellation, in South Africa, which is responsible for your information. Email hello@adventurelive.me with any question about privacy.