PRIVACY

What we keep,
and what we don’t.

This website

The website uses no cookies, analytics, advertising or third-party requests. Every file is served from enrouteatlas.com, and the “Check API connection” button only sends a request to our own API. The API does not set cookies either.

The API and the app

When the app connects, it registers an anonymous installation. It sends a random installation ID generated by the app, the platform (iOS) and, optionally, the app version. We do not ask for a name, email address, account or advertising identifier.

For that installation we store:

These records are used only to let the app start a session, read its content catalog and keep access secure. Access tokens are valid for 15 minutes. A session and its refresh token expire after 90 days. Revoking a session stops it immediately.

IP addresses are not stored in the application database. Rate limits use a keyed hash of the IP address that cannot be reversed without the server secret, and those counters expire automatically. Our hosting provider may keep standard server logs, including IP addresses, for security and troubleshooting.

What we do not do

Removing a session

Sessions can be revoked. Because the installation ID is random and not linked to a person, we cannot identify you from it. If you need help, contact us and include the installation ID shown in the app.

Changes

This statement may change as the app develops. The date below shows the latest version.

Last updated: 1 November 2026. Questions: privacy@enrouteatlas.com.