Privacy Policy

Nice Drives is operated by Dylan Stones ("we", "us", "our"). For any privacy questions or to exercise the rights described below, contact ddylanstones@gmail.com.

We collect the following categories of information:

• Account information — your email address, chosen username, and password (stored as a salted hash by our authentication provider, Supabase — we never see or store your plaintext password).
• Content you submit — drives you create (title, description, route coordinates, tags, difficulty, photos), reviews and star ratings, "mark as driven" logs and notes, stops you add to a drive, and photo likes/reports.
• Location data — if you grant permission, your device's GPS location is used to show your position on the map. This stays in your browser and is never sent to or stored on our servers.
• Local preferences — your dark/light mode choice and login session, stored in your browser's local storage.

We use the information above to:

• Provide the core service — let you browse, create, save, and review drives.
• Authenticate you and keep your account secure.
• Send account-related emails (signup confirmation, password reset).
• Moderate submitted content for prohibited language (see our Terms of Service).
• Show ads via Google AdSense — see "Cookies and advertising" below for how consent is handled.

We do not sell your personal information.

We show ads through Google AdSense to help cover the cost of running Nice Drives. If you're in the UK, EEA, or Switzerland, you'll see a consent banner (provided by Google's certified consent management platform, not custom code of ours) asking whether you consent to personalized advertising — your choice is honored before any ad-related cookie is set. Outside those regions, ads may load without a prompt, in line with Google's policies for those jurisdictions.

When active, AdSense uses cookies to personalize the ads you see and measure their performance. Google's use of this data is governed by their own privacy policy, and you can manage ad personalization across all sites at adssettings.google.com.

Nice Drives is built on top of a small number of third-party services, each of which processes a limited slice of data necessary to provide the feature it's used for:

• Supabase — hosts our database, authentication, and photo storage. This is where your account and content data lives.
• Resend — sends transactional emails (signup confirmation, password reset) on our behalf.
• OpenStreetMap / Leaflet — provides the map tiles you see on every map.
• OSRM, Open-Meteo, and the Overpass API — used to calculate road-following routes, elevation profiles, weather conditions, and road-surface data. These services receive only anonymous route coordinates (latitude/longitude) — never your name, email, or account details.
• Google AdSense — shows ads. See "Cookies and advertising" above for how consent is handled.

We retain your account and content for as long as your account is active. Deleting a drive also deletes its photos, reviews, and stops. To delete your account entirely, email us at ddylanstones@gmail.com and we'll remove your account and associated personal data, except where we're required to keep records for legal reasons.

If you're located in the UK or EU, you have rights under UK/EU GDPR to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at the email above.

Nice Drives is not intended for anyone under 18. We don't knowingly collect data from minors.

We rely on Supabase's infrastructure, which encrypts data in transit and at rest. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We may update this policy from time to time. We'll update the "Last updated" date above when we do. Continued use of Nice Drives after a change means you accept the revised policy.

Questions about this policy? Email ddylanstones@gmail.com.