Last updated: February 22, 2026
Mileweave ("we," "us," or "our") is operated by Centricle LLC. This Privacy Policy explains how we collect, use, and protect your personal information when you use mileweave.us (the "Service").
When you create an account, we collect your email address, display name, and password. Authentication is handled by Supabase.
When you use the Service, we store the trip data you create, including: trip titles, descriptions, and status; location data (addresses, geographic coordinates, Google Place IDs); waypoints and stop information; day segment breakdowns (distances, durations); and trip sharing tokens.
If you use Mileweave without an account, a single trip is stored in your browser's localStorage. This data stays on your device and is not sent to our servers unless you create an account and choose to migrate it.
When you share a trip via a share link, recipients can view your trip title, description, status, all waypoint locations (addresses, coordinates), waypoint notes, and day segment breakdowns. Recipients cannot see your email address, display name, or other account information. Share links do not expire unless you delete them.
With your consent, we collect anonymized usage data through Google Analytics, including pages visited, time spent, device type, browser, and general geographic region. This data is not linked to your account.
We use the following third-party services to operate Mileweave:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication | Account info, trip data |
| Google Maps Platform | Maps, routing, place search | Addresses, geographic coordinates, and Google Place IDs for all trip waypoints; real-time search queries when using location autocomplete; full trip itinerary (all waypoints) when calculating routes |
| Google Analytics | Usage analytics (consent-gated) | Anonymized browsing data |
| Stripe | Payment processing | Email address, subscription status. Payment card details are collected directly by Stripe and never touch our servers. |
| Netlify | Hosting & serverless functions | HTTP request data |
Each service operates under its own privacy policy. We encourage you to review them.
We use minimal cookies and browser storage:
| Item | Type | Purpose | Required |
|---|---|---|---|
| Supabase auth token | localStorage | Keeps you signed in | Essential |
| mileweave_analytics_consent | localStorage | Remembers your analytics choice | Essential |
| mileweave_guest_trip | localStorage | Stores trip data in guest mode | Essential |
| Google Analytics cookies | Cookies | Usage analytics | Optional (consent-gated) |
We do not use advertising or retargeting cookies. Google Analytics cookies are only set after you accept analytics via the consent banner. You can change your choice at any time by clearing your browser's local storage for this site.
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 90 days. Anonymized analytics data may be retained indefinitely.
We use reasonable measures to protect your information, including encryption in transit (HTTPS), secure authentication, and row-level security on our database. No method of transmission over the Internet is 100% secure, so we cannot guarantee absolute security.
Mileweave is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.
You have the right to:
To exercise any of these rights, contact us.
If you are a resident of California, Virginia, Colorado, Connecticut, or another US state with consumer privacy laws, you may have additional rights including:
To exercise these rights, contact us.
In the event of a data breach affecting your personal information, we will notify affected users within 72 hours via email (for account holders) or through a notice on the Service. We will also notify relevant authorities as required by applicable law.
Centricle LLC is based in the United States. If you access the Service from outside the US, your data is transferred to and processed in the United States.
Our legal bases for processing personal data under the GDPR include:
International users have the right to:
To exercise these rights, contact us.
We do not currently respond to Do-Not-Track browser signals. However, you can decline analytics cookies via our consent banner to prevent any non-essential tracking.
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes, we will provide notice through the Service.
If you have questions about this Privacy Policy, please contact us.