Your track never leaves the browser.

Plotting, editing, elevation sampling, GPX import, and GPX download all run on your device. We do not create accounts. We do not upload your route to a server we control. A share link stores coordinates in the page URL on your machine; whoever has that link can see the line.

What the browser does request

• Map tiles from OpenFreeMap, to draw the basemap.
• Terrain tiles from AWS Open Data (Terrarium), to shade hills and sample elevation.
• Place names from Photon when you use search. That sends the query text, not your GPX.

Those services see ordinary map traffic: a viewport, or a place name. They do not receive the GPX file. Drafts stay in the browser on this device.

On maptogps.com we use Google Analytics 4 to count which pages people open. We send the page path, not the share-link hash that stores your coordinates. Google does not receive your GPX or drafts on this device.