← Back to Home

Privacy Policy

Last Updated: July 2026

At Trail Render, we prioritize the protection and confidentiality of your personal and telemetry data. This Privacy Policy details how we collect, process, secure, and share your information in accordance with the General Data Protection Regulation (GDPR) and other applicable European data protection guidelines.

1. Data Controller

The data controller responsible for the processing of your personal data is:
MAO Solutions
Online Service operated in Poland
VAT ID: PL9860066581
Contact Email: [email protected]

2. Data We Collect and Process

We process the following categories of data in order to provide our service:

  • Identity & Account Data: Your name, email address, and avatar URL provided to us when you sign in via our supported third-party authentication providers or connected fitness platforms (e.g., Google, Strava, Garmin Connect).
  • Telemetry & Health Data (GPS Tracks): Raw coordinate, time, elevation, and speed details contained within GPX, TCX, or FIT files that you explicitly upload to our service. If your uploaded files contain health-related data (such as Heart Rate or power metrics), we process this data strictly for the purpose of rendering it in your video, based on your explicit consent when uploading the file.
  • Render Output Data: The generated MP4 3D flyover video files cached and processed on our servers.
  • Connection and Usage Logs: IP addresses, browser types, session tokens, and operational log data containing correlation identifiers used for security and diagnostics.

3. Analytics, Cookies and Local Storage

We use strictly necessary cookies and browser local storage to maintain your active authentication session, store your visual track styling preferences, and manage your CSRF security tokens.

Google Analytics: We use Google Analytics for gathering anonymous browsing data and audience statistics. This information is collected solely for our internal purposes to help us improve our product and user experience.

We clearly state that we do not, nor do we ever intend to, sell any of your data in any form, or use it for any other purposes such as third-party advertising.

4. Purposes and Legal Basis of Processing

We process your data under the following legal bases in accordance with GDPR Article 6 and Article 9:

  • Performance of a Contract (Art. 6(1)(b)): To manage your user profile, parse uploaded GPX/TCX/FIT logs, display interactive previews, and compile final MP4 video flyover animations.
  • Consent (Art. 6(1)(a)): For managing authentication tokens linked to third-party login providers and connected fitness platforms, and utilizing Google Analytics. You can revoke this at any time by deleting your account or managing your cookie preferences.
  • Explicit Consent (Art. 9(2)(a)): For the processing of specific health-related telemetry (such as heart rate data) extracted from your uploaded files, strictly to visualize it on the generated video overlays.
  • Legitimate Interests (Art. 6(1)(f)): For monitoring server resource utilization, preventing database abuse, debugging system exceptions, and maintaining secure access credentials.

5. Data Sharing and Subprocessors

We do not sell, rent, or trade your personal data. We only share data with subprocessors necessary to operate our service and improve your experience:

  • Authentication & Connected Fitness Partners (e.g., Google LLC, Strava Inc., Garmin Ltd.): Used to handle secure OAuth authentication, account profile provisioning, and fitness data synchronization. (Google LLC is also used to provide Google Analytics for our internal usage statistics).
  • Stripe Inc.: Used as our secure payment gateway to process subscription billing and maintain financial records. We do not store your raw credit card data on our servers.
  • Mapping Assets Providers: Map tiles and elevation models are requested from providers (e.g. MapTiler). To ensure your privacy, all third-party map requests are proxied via our own backend. Your IP address or identity is never shared with third-party GIS providers.

6. Data Retention Periods

We minimize data retention to what is strictly necessary:

  • Account Data: Stored permanently until you request account deletion.
  • Uploaded Track Files & Metadata: Stored in your active Track Library until you delete them.
  • Rendered Videos (MP4 files): The retention period for generated video files depends on your active subscription plan and scheduled system maintenance tasks. Additionally, you may manually delete your generated videos from our servers at any time via your account dashboard. Download links remain valid only as long as the file is hosted on our servers. Job metadata is kept for analytical statistics.

7. Your Data Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: Request a copy of the data we hold about you.
  • Right to Rectification: Ask us to correct inaccurate information.
  • Right to Erasure (Right to be Forgotten): Request the permanent deletion of your account and all associated tracks/videos.
  • Right to Restrict or Object: Restrict how we process certain data based on legitimate interests.
  • Right to Data Portability: Obtain a copy of your uploaded telemetry logs in standard JSON/GeoJSON format.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Supervisory Authority

If you believe our data processing operations violate GDPR regulations, you have the right to lodge a complaint with your local supervisory authority. In Poland, this is the President of the Personal Data Protection Office (UODO, ul. Stawki 2, Warsaw).