Privacy policy

Who we are

Routus is a platform for interactive city routes and city escapes, part of L&E Creative Concepts. Privacy questions: info@routus.com.

What data we process

Account: name and email address when you create an account (including Google login).

Play data: your progress through a route (points visited, challenges answered, play time) and — only if you submit them — team name and rating.

Photo challenges: photos you upload for a photo challenge are reviewed by an AI (Anthropic Claude), stored privately, and deleted automatically within 7 days. They are not publicly visible.

Shared photos: photos you voluntarily share on a stop after playing are shown publicly on the route and city pages — only after the maker approves them — and are retained. You give explicit consent for this at upload.

Location: your live GPS location is used to show distances and compute a walking route. For that route we send your coordinates to Mapbox; we do not store your location on our servers.

Purchases: email address and payment status. Payment runs through Mollie; we never see or store your bank details or card number.

Email preferences: if you sign up for updates about new routes in a city, we store your email, the city, and the time you signed up. You can unsubscribe anytime via the link in every email.

Visit statistics: for every page view we store which page was viewed, the country, and an encrypted visitor code that changes every day (derived from your IP address and browser — we never store the IP address itself). If you consent to statistics, we also store your city or region, a location rounded to roughly a kilometre, and the website you came from.

Try-the-editor: if you use the editor without an account, we create a temporary, nameless session so your route survives while you build. If you don't create an account within seven days, we delete that session and the route automatically.

How we use it

Solely to operate the platform: play and resume routes, deliver purchases, pay makers, prevent abuse, see how the site is used, and — with your consent — email you about new routes.

When you buy a route that includes a partner deal, we share your email and the number of participants with that partner venue so they can prepare for your visit.

We do not sell data and we show no ads.

Who we share data with

Supabase — hosting, database and storage (EU, Frankfurt).

Vercel — hosting and delivery of the website (servers in Frankfurt; the company itself is US-based).

Cloudflare — bot protection (Turnstile) on sign-in, sign-up and the try-the-editor page.

Mollie — payments (Netherlands/EU).

Resend — transactional email delivery (EU).

Mapbox — maps and walking routes (US).

Google Maps — optional navigation to the start point (US).

Anthropic (Claude) — AI review of photo challenges (US).

Partner venues — only for a route with a partner deal, as described above.

Transfers outside the EU

Vercel, Cloudflare, Mapbox, Google and Anthropic are based in the United States; our web servers themselves are in Frankfurt. Transfers rely on the EU Standard Contractual Clauses (SCCs), and photo, location and statistics data are kept to the necessary minimum.

Retention

Photo challenges: up to 7 days. Shared, approved photos: until you or the maker removes them. Account and play data: for as long as your account exists.

Visit statistics: 6 months. Try-the-editor sessions without an account: 7 days.

You can delete your account and data yourself from your dashboard, or email info@routus.com.

Cookies

Necessary cookies keep you signed in and make a route work; these are always on. That includes the cookie storing your own cookie choice (routus_consent, 180 days).

Statistics are optional and off by default. Without your consent we only count how often a page was viewed, with the country and a code that changes every day — not traceable to you. If you consent, we add your city or region, a coarsely rounded location and the referring website, so we can see which cities and channels work.

We use no advertising cookies, do not follow you across other websites and share nothing with ad networks. You can change your choice at any time via 'Cookie preferences' at the bottom of every page.

Your rights

You have the right to access, correct, delete, restrict, object, and to data portability. You can delete your data yourself from the dashboard or via info@routus.com. You may also lodge a complaint with the Dutch Data Protection Authority.