Privacy policy

Updated 23 October 2026

Jejak is a free website for discovering and sharing outdoor routes in Indonesia. You can browse trails and download public GPX files without an account. This page explains how the current service handles information.

Google sign-in

If you choose Continue with Google, Google and Supabase Auth process your basic profile, email address and sign-in information. Jejak uses that identity to sign you in and verify which contributions you own. We do not receive your Google password or request access to your Drive, Gmail, contacts or calendar. Google account information is not used for advertising or sold.

Supabase manages the account and session. Our route database records your Supabase user ID and the public author name you choose. Your email address is not displayed on public trails.

Tracks and photos you publish

A community contribution is public: anyone can read its title, author name, place, activity, notes and route statistics; view its map and photo; and download its GPX without signing in. GPX files contain precise coordinates and can also contain timestamps, waypoint names and other embedded information. Review your file before publishing, especially if it includes a home or another private location.

Community route information, original GPX files, geometry, ownership IDs and photos are stored in Jejak's PostgreSQL database on its own server. Photos are resized and re-encoded as JPEG with embedded metadata removed. GPX downloads retain the uploaded original. Community uploads are shared under the CC BY 4.0 permission confirmed in the upload form.

Storage on your device

Your signed-in session, chosen theme, saved-trail bookmarks and preferred public author name use browser storage. Personal GPX imports use local browser storage, and their photos use IndexedDB. Personal imports are separate from published contributions and stay on that device. Clearing browser storage can remove these local items and sign you out.

Providers and technical requests

Cloudflare hosts the website and connects it to the private route API. Google and Supabase provide authentication. OpenStreetMap supplies the Standard map tiles when maps are visible. Selecting Topographic on an interactive map requests OpenTopoMap-R tiles from openmaps.fr; thumbnails continue to use Standard maps. These providers receive the network and browser information needed to process their requests, such as IP addresses and requested resources. A map-tile request also identifies the map area being viewed. Their own privacy policies explain their processing: Cloudflare, Supabase, Google and OpenStreetMap Foundation. The topographic provider describes its service and usage conditions at openmaps.fr.

This version does not include advertising or an application analytics tracker.

Community moderation

Authorized site administrators can review submitted tracks and photos, correct public details, and hide or restore contributions. These actions record the administrator user ID, time, reason and relevant before/after details in a private moderation history. This history supports maintenance and accountability and is included in database backups. Only explicitly authorized administrators can access removed contributions and this history.

Retention, backups and removal

You can edit or remove your own published trails while signed in. Removal hides the contribution from public listings, maps, photo requests and GPX downloads. It is a recoverable removal: the server retains the record, and existing database backups may contain copies. Complete database backups are copied to private Google Drive storage; the current backup setup does not automatically expire those Drive copies.

Supabase account records are maintained separately from route backups. Signing out or revoking Google access does not delete an account or its published contributions. Other people may also retain GPX files and licensed contributions they downloaded earlier.

For account deletion, data removal, correction or a privacy concern, contact genius.tsy.2013@gmail.com, Jejak's support contact. Include the relevant trail or account email so we can verify ownership and arrange removal. Self-service account deletion and backup erasure are not currently available. We will explain any copies that remain in retained backups when handling a request.

Changes and contact

We will update this page when the service's data handling changes. Questions and removal requests can be sent to the support address above.