Your journey is yours.

Last updated September 19, 2026

What you give us

• Your GPS tracks, photographs, video, their metadata, and the words you write.
• Your name, email address and account identifier when you sign in with Google. We use Amazon Cognito to manage sign-in; we do not receive or store your Google password.
• Information about a publish purchase, such as the amount, payment status and Stripe session identifier. Stripe handles card details; Tripshare does not store card numbers.

Why we use it

We use this information to create and show your journey, match media to your route, process payment for publishing, keep the service secure, respond to you, and meet legal obligations. We do not sell personal information, show advertising, or use your journeys for advertising.

Private until you publish

A track says where you live, where you slept and when you were away. So a journey is visible only to you while you make it. It becomes readable by anyone else in exactly one way, and only by your choice: publishing it to its own address. A published journey can be copied, shared or indexed by others, so you should treat its route, writing and visible media as public.

Location in your media

Photographs and video can carry where and when they were taken. We use that information to put them on your route. Published media is made from derivatives that are checked for location metadata; publishing refuses a file that still carries a location tag. Before you publish, we also point out a long stop at the very start or end of a recording, such as home, so you can trim it. These checks are a safeguard, not a guarantee: a route itself, a visible landmark, a caption or a person in a photograph may still reveal a location.

Who processes information for us

• Google provides the sign-in identity you choose to use, and Amazon Cognito manages the Tripshare account created from it.
• Amazon Web Services stores and processes Tripshare content and account records. Our current service infrastructure is in the United States.
• Stripe processes checkout payments under its own privacy policy.

These providers process information to provide their services to Tripshare. They may process information in countries other than the one where you live, where it may be subject to local laws. We may also disclose information where required by law or to protect the service, its users or the public.

Cookies

Tripshare uses essential cookies to keep you signed in and to complete the sign-in flow. We do not use Tripshare cookies for advertising or third-party analytics.

Security

We use access controls, encryption and private storage to protect information under our control. No online service can guarantee absolute security, so please use a strong, protected Google account and let us know promptly if you suspect unauthorized access to Tripshare.

Keeping and deleting

You can delete a journey or your whole account from the editor. Deleting starts removal of its journeys, uploads, derivatives and published pages from active Tripshare storage; it also removes the account when you delete the account. A deleted journey’s public address is retired for 30 days before it may be used again. We may keep limited information for backups, security, legal obligations or payment records until it is no longer needed for those purposes.

Your questions and choices

You can ask about, correct or request access to the personal information Tripshare holds about you, or raise a privacy concern, by writing to hello@tripshare.ca. If you are in Canada and we do not resolve your concern, you may contact the Office of the Privacy Commissioner of Canada.

Changes to this policy

If we change this policy, we will post the updated version here and change the date at the top of this page.