Cookies & trackers

This page explains what the wayside.tours website and the Wayside app store on, or read from, your device, as required by the EU ePrivacy rules (Art. 82 of the French Loi Informatique et Libertés, applied by the CNIL) and the UK PECR. The app uses one analytics tool, Google Analytics for Firebase (GA4); on Android it also collects the device advertising ID for ad conversion measurement. Both are off until you agree in the EU/EEA/UK, and on by default with a one-tap opt-out everywhere else. iOS uses no advertising identifier.

On the website

• Cookies: none. The site is a static site; it sets no first-party or third-party cookies.
• Local storage (theme preference): if you toggle light/dark mode, your choice is saved in your browser’s local storage (key wayside-theme) so the site remembers it. This is strictly necessary to provide a feature you asked for, is exempt from consent, never leaves your browser, and can be cleared through your browser’s site-data settings at any time.
• Interactive map on tour pages: each tour page embeds an interactive map to preview the route. Its map images (tiles) come from a third-party provider, CARTO, using OpenStreetMap data, and load only when you scroll the map into view. As with any resource your browser fetches from another server, CARTO receives your IP address when the map loads. See the privacy policy for who receives what.
• Photographs on tour and city pages: some photographs on tour and city pages come from a third-party provider, Unsplash, and load directly from Unsplash’s servers. This exposes your device’s IP address to Unsplash when the photograph loads. See the privacy policy for who receives what.
• Analytics (Umami): we use Umami to count visits and basic interactions, such as which page you are on and whether you tapped a download button, so we can see what is useful and what is not. It is cookieless: it sets no cookie and stores nothing on your device, it uses your IP address only momentarily to count the visit and does not keep it, it keeps no identifier that could single you out, and it does not track you across other websites. See the privacy policy section 4C.
• No advertising or social-media trackers, no fingerprinting, no cross-site tracking. The only third-party services on the site are the cookieless analytics, the functional map, and the Unsplash photographs described above.

In the app

• One analytics tool, Google Analytics for Firebase (GA4). The app measures how the product is used so we can see what works and fix what doesn’t. It records the screens you view, when you finish onboarding, city searches (the place name you type, trimmed and length-capped, never free-form text beyond a place name), tours you start, complete, rate, or share, how far you get through a walk and how long it takes, paywall views and dismissals, which plan you pick and when a purchase completes (which pass, never payment details), and feedback submissions. Alongside those it stores two properties about your session (whether you’re on the free or Plus plan and your app language) and the analytics service adds standard technical context automatically (device type, operating system, coarse region, and session counts). It is linked to your anonymous account identifier, nothing more.
• iOS: no advertising identifier, no cross-app tracking. On iOS the app uses no advertising identifier (no IDFA), does no cross-app tracking, and shows no App Tracking Transparency prompt. Apple’s AdServices provides only campaign-level install attribution, with no cross-app identifier.
• Android: advertising ID for ads measurement. On Android the app collects the device advertising ID (Google Advertising ID) and reports conversion events to Google Ads, so we can improve the ads we run. It is not used to track you across other apps or to personalize ads. This is gated by the Ads measurement switch in You → Privacy: off until you turn it on in the EU, EEA, and UK, and on by default with a one-tap opt-out everywhere else. See the privacy policy section 4B.
• No precise location. Neither analytics nor ads measurement collects your precise location; the only place signal analytics sees is the city you browse.
• Photographs from Unsplash. Tour and city screens show photographs from Unsplash, loaded directly from Unsplash’s servers. This exposes your device’s IP address to Unsplash when a photograph loads. Downloading a tour for offline use also saves a copy of its Unsplash photographs to your device. See the privacy policy section 5.
• App update check and on-device update cache. On launch the app contacts Expo to see whether a newer JavaScript bundle is available, and may store a downloaded bundle on the device to apply on the next launch. This exposes your device’s IP address to Expo. See the privacy policy section 5.
• You choose, and refusing is as easy as accepting. In the EU, EEA, and UK analytics is off until you turn it on. We ask during onboarding, and nothing fires unless you agree. Everywhere else it is on by default with a one-tap opt-out. Either way the switch lives in You → Privacy, turning it off is as easy as leaving it on, and switching it off also resets the analytics identifiers on your device.
• On-device storage. The app stores your session and preferences (library, interests, settings) in its own local storage on your device. This is the app’s working data, not a tracker; it stays on the device except as described in the privacy policy.
• Crash reporting. If the app crashes, a diagnostic report is sent to Sentry and Firebase Crashlytics so we can fix the problem. Reports carry technical device data and your anonymous account identifier, nothing more; see the privacy policy for details and retention.
• Push tokens. Only if you turn notifications on; delivered through Apple/Google push services and deleted with your account.

Your controls

• Website: clear or block site data in your browser settings.
• App: manage notifications in the app or your device settings; delete all app data via You tab → Delete account & data (see account & data deletion).

Questions: privacy@wayside.tours.