Privacy Policy
Last updated: 7 October 2026
Who we are
Motarva ("we", "us", "our") operates the motorcycle route-sharing platform at https://motarva.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. This policy covers both the motarva.com website and the Motarva iOS app.
Motarva is operated by Beuzze, VAT BE 0754.641.390, Belgium.
Data we collect
Account information
When you register, we collect:
- Username and display name
- Email address
- Password (stored securely hashed, never in plain text)
Profile information
You may optionally provide:
- Rider bio (max 300 characters)
- Country of residence
- Motorcycle make and model
- Profile photo (optional, stored on our own server; without one we show your initials, and no third-party service such as Gravatar is contacted)
If we mark your profile as a verified rider, or link it to a partner business, that mark is shown publicly next to your name. We grant both by hand and you can ask us to remove one.
Route data
When you upload or create a route, we collect:
- GPX, TCX, ITN, or FIT file contents (waypoints, coordinates, elevation data)
- Route title, description, and tags
- Curviness, route shape and vehicle type selections
- Start and end coordinates (used for country/region detection and route type classification)
- Calculated statistics: distance, elevation gain, duration, point count
- Route visibility setting (public or private)
When using the Route Maker tool, we additionally store:
- Drawn route geometry (all coordinates)
- Points of interest you add (coordinates, labels, categories)
- Draft routes (including for guests via anonymous session tokens)
When you draw or generate a route, its coordinates are sent to our own routing engine on our server so the line can follow real roads. Those requests appear in our server logs, which are deleted after 14 days and are not linked to your account.
Reviews
When you review a route, we store your star rating and review text, linked to your account.
Activity data
- Favorites: Routes you save to your favorites list
- Completions: Routes you mark as ridden, including optional rating
Ride data
When you ride with the Motarva app, the app records the ride and sends it to your ride log:
- Distance ridden, when the ride started and ended, and how much of that time you were moving
- Average speed and top speed
- The route you followed, when the ride followed one
- Where the ride started, at country and region level
- A simplified speed trace of at most 600 points, when your ride includes one
- The line you rode, simplified to about 10 metres, only if you turned on "Save ride lines" in the app
We use a saved ride line only to check the ride and to work out which countries and regions you rode through, for your season recap and the leaderboards. The line stays private: nobody else sees it, and leaderboards show only numbers, never where you rode. We delete a line 24 months after the ride; the countries and regions worked out from it stay. Without "Save ride lines" we store no GPS trace of your ride, unless you save that ride as a route yourself. Turning it off stops new lines; deleting a ride also deletes its line.
Your rides are private. Only you can see your ride log. You can choose to show other riders your total distance and your number of rides, and nothing else: your top speed is never shown to anyone but you. We never rank riders by speed or by ride time.
Rides are recorded by the Motarva app. If you only use the website, we hold no ride data about you.
Gamification data
- XP and levels: We track experience points earned through platform activities (uploads, reviews, referrals) and your current level
- Badges: Achievement badges awarded for milestones
- Referrals: We track referral relationships between users (who referred whom) and associated XP rewards
Partner inquiries
If you submit a partner inquiry, we collect: business name, contact name, email, phone (optional), business category, website, address, country, and your message. This data is sent to our admin team via email.
Automatically collected data
- IP address: Used temporarily for rate limiting (login attempts, API requests, form submissions), in hashed form, for 15 minutes to 1 hour. Our server logs store a shortened IP address (the last part removed), which does not identify you on its own. When a request fails or is refused with an error (for example a server error, a request for a folder that is not public, or an upload that is too large), the full address is kept in an error log. Server logs that record your requests are deleted after 14 days.
- Error reports: When something goes wrong on our server we record a technical error report: what failed, on which page, the time and, if you were signed in, a code that changes every day and is not your name, e-mail or account number. We use these reports only to fix faults and delete them after 14 days. A tally of each kind of fault, with nothing that points to you, is kept for up to 90 days.
- Reporter IP: When a route is reported for abuse, the reporter's IP address is stored for moderation purposes.
- Route view counts: We count page views per route using temporary IP-based deduplication. The IP hash expires after a short period.
- Download counts: We record how many times routes are downloaded, together with the account that downloaded, because downloading a route requires you to be signed in.
- Partner listings and navigation starts: When a sponsored partner's pin or card is shown to you, or you tap it, we count that per partner, so we can tell partners how often their listing was seen and opened. When you start turn-by-turn navigation in the app, we count that too, with how far you were from the route. We store these counts without your account and without your IP address. The individual entries are deleted after 90 days; after that only daily totals remain. Motarva Pro members are not shown partner listings in the app.
- Sign-in activity: We store when you first signed in, when you last signed in, and when you were last active, together with whether that was on the website or in the app. This helps us recognize inactive accounts and support you when something goes wrong.
Mobile app (iOS)
When you use the Motarva iOS app, we additionally process:
- Location: Your device location is used to show your position on the map and to provide turn-by-turn navigation. During navigation, coordinates go to Mapbox for directions, and to our own routing engine when the app asks for the way back to your route after you leave it. We store no navigation location in any database. The coordinates of those routing requests do appear in our server logs, which are deleted after 14 days and are not linked to your account.
- Recorded rides: When you record a ride, the app collects a GPS track on your device. The track is uploaded to your account only when you choose to save it, and is then handled as route data.
- Group rides: While you take part in a live group ride, your position, heading, and speed are shared with our server so members of the same session can see you on the map. Live positions are kept in short-lived server memory for at most 10 minutes and are never stored permanently.
- Profile photo: A profile photo you upload in the app is stored with your account.
How we use your data
- Provide the service: Display your routes, profile, reviews, and activity to other users (respecting your visibility settings)
- Geographic classification: We use your route's start coordinates to automatically determine the country and region via reverse geocoding
- Route type detection: We compare start and end coordinates to classify routes as loops or point-to-point
- Security: Rate limiting to prevent abuse, spam detection via honeypot fields
- Communication: Emails about your account: activation, welcome, password reset, sign-in codes and partner inquiry confirmations
- Newsletter: Only if you said yes: an email about new routes and app updates, at most once a month. We store your answer and when you gave it. You can change it any time in your profile settings or with the link in every email.
- Gamification: Calculate XP, levels, and badge awards based on your activity
- Referral program: Track successful referrals and award XP to referrers
Third-party services
We use the following external services to operate the platform:
| Service | Provider | Purpose | Data shared |
|---|---|---|---|
| Map tiles | Motarva (tiles.motarva.com, delivered by Cloudflare) | Render map backgrounds | Your browser requests the map tiles for the visible map area from our own tile server; Cloudflare delivers them for us and receives your IP address and browser details |
| Satellite imagery | Esri (ArcGIS) | Show aerial photos when you choose Satellite or Hybrid on a map | Only when you choose a satellite layer: your browser requests the image tiles for the visible map area from Esri, which receives your IP address and browser details |
| POI photos | Wikimedia Commons (upload.wikimedia.org), Wikimedia Foundation | Show a photo of a place on our maps, in lists of places and in a place's details, with its photographer and licence | Only when a place you look at has a photo: your browser loads the image directly from Wikimedia's image server, which receives your IP address and browser details. We send no referrer, and your browser neither sends nor stores a Wikimedia cookie for these images. We store only the photo's file name, author and licence. |
| Reverse geocoding | Nominatim (OSM) | Name places: the country and region of a route, and the place name of each stop in the route builder | The coordinates of a route's start and of each stop you place in the route builder, sent by our server |
| Location search | Our own server (OpenStreetMap data); Photon (Komoot) and Nominatim (OSM) only when you choose Search as an address | Search for places in the route builder and the planner | What you type and, in the route builder, the centre of your map view, to our own server. When you choose Search as an address, that text and an approximate area are sent by our server to Photon (Komoot) and, if needed, Nominatim (OSM) |
| Maps and navigation (iOS app) | Mapbox | Render maps and provide turn-by-turn directions and voice guidance in the app | Device location during navigation, the map viewport, and one active-user count for Mapbox billing (not linked to your Motarva account) |
| Weather along a route (iOS app, Motarva Pro) | MET Norway (Norwegian Meteorological Institute) | Provide the forecast at points along a route for the departure time you choose | Coordinates sampled from the route line and the departure time, sent by our server; never your live position, device or account |
On the website, following the road and generating routes happen on Motarva's own servers; your route is not sent to other routing services.
We do not use any advertising networks, tracking pixels, or third-party analytics services. Motarva's maps and turn-by-turn directions come from Mapbox. When you open a navigation map, your device asks Mapbox for the map tiles and for the route, and Mapbox counts one active user for its billing. Usage and location collection in the Mapbox SDK is switched off in the Motarva app, so it sends no usage or diagnostic data about you. There are no ad networks, no tracking pixels and no analytics SDK in the app.
We measure visits to the website with software we run ourselves (Umami) on our own server in Belgium. It sets no cookies and stores no IP address: visits are counted with a hash that changes every day and cannot be traced back to you. It respects your browser's "Do Not Track" setting.
Cookies and local storage
For full details on cookies and browser storage, see our Cookie Policy.
Data retention
- Account data: Retained for the lifetime of your account. Permanently deleted when you delete your account from your account settings.
- Route data: Draft and private routes are deleted when you delete your account. Published routes are retained as anonymized community content, attributed to "Deleted User".
- Reviews: Deleted when you delete your account.
- Rides: Kept until you delete the ride or your account. Deleted permanently with your account, together with your reviews and gamification data.
- Rate-limiting data: Temporary, automatically expires after 15 minutes to 1 hour.
- Uploaded files: Temporary upload files are automatically cleaned up after 2 hours via scheduled task. Published route files are retained until the route is deleted.
- Recorded rides: Stored only when you save them; handled as route data from that point on.
- Live group ride positions: Automatically deleted after at most 10 minutes; never stored permanently.
- Referral data: Retained for the lifetime of both referrer and referred accounts.
Your rights
You have the right to:
- Access: View all personal data we hold about you via your profile page
- Rectification: Update your profile information at any time
- Deletion: Delete your account and all personal data from your account settings at any time
- Data portability: Download your routes in GPX format at any time
- Withdraw consent: Delete your account to withdraw consent for data processing
You can exercise most of these rights directly from your account settings. For additional requests, contact us via the information below.
Data security
- Passwords are hashed using bcrypt (WordPress standard)
- All forms are protected with CSRF tokens (nonces)
- Login attempts are rate-limited (5 attempts per 15 minutes per IP)
- API requests are rate-limited (120 requests per minute per IP)
- File uploads are restricted by type and size (max 5 MB)
- Partner inquiry forms include honeypot spam protection
Children's privacy
Motarva is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Changes to this policy
This policy is dynamically generated based on the features currently active on the platform. When features are added or removed, this policy automatically reflects those changes. We recommend reviewing this page periodically.
Contact
For any privacy-related questions or requests, contact the data controller:
Beuzze
VAT BE 0754.641.390
Email: [email protected]