Privacy Policy
Last updated: 21 July 2026
This Privacy Policy describes how MotoPath processes the personal data of users of its products: the Route Planner (web app at motopath.it/planner) and the MotoSpeed app for iOS and Android. For details specific to the MotoSpeed app (GPS, sensor and speed-camera data collection), see the MotoSpeed Privacy Policy.
1. Data controller
Nicola Esposito — contact: info@motopath.it
2. Data collected by the Route Planner
2.1 User account
To save routes and access the Planner's advanced features you need to create an account. We collect:
- Email — required for authentication, password recovery and service communications.
- Password — handled via Firebase Authentication (Google Cloud), encrypted and never visible in plain text, not even to the data controller.
- Unique user identifier (UID) — generated by Firebase, used internally to associate saved routes with the individual account.
- Registration and last sign-in timestamps — for technical security and service analysis purposes.
2.2 Saved routes
When you save a route in the Planner, the following are stored: route name, list of stops (GPS coordinates), computed polyline, total distance, estimated duration. Data is associated with your UID and accessible only by you after authentication.
3. Marketing and email communications
Limited purpose: the consent given via the "I agree to receive communications" checkbox authorises Nicola Esposito (MotoPath owner) to send emails solely for communications relating to the MotoSpeed and MotoPath Route Planner products: product updates, feature news, new-version announcements, promo codes, motorcycling-themed editorial content related to these products.
The email will NEVER be used for: third-party products, external sponsorships, advertising profiling, sale or transfer of lists to third parties, or any other communication unrelated to MotoSpeed or Route Planner.
3.1 Optional consent
Marketing consent is optional: not subscribing does not affect in any way the use of the Planner or other services. If you do not tick the box at registration, your email will be used only for service communications (e.g. password recovery, essential service changes).
3.2 Withdrawal of consent
Consent can be withdrawn at any time:
- Via the one-click unsubscribe link at the bottom of every marketing email.
- By sending a written request to info@motopath.it.
Withdrawal takes immediate effect and does not entail any loss of Planner functionality.
4. Legal basis for processing
- Performance of a contract (Art. 6(1)(b) GDPR) — for email/password/UID/saved routes: necessary to provide you the Planner service.
- Explicit consent (Art. 6(1)(a) GDPR) — for marketing communications relating to MotoSpeed and the Planner.
- Legitimate interest (Art. 6(1)(f) GDPR) — for technical security logs (sign-in timestamps).
5. Data retention
- Account and routes: kept while the account is active. On a deletion request (see point 7), removed within 30 days.
- Marketing email: consent is kept until withdrawn. The consent history (activation/withdrawal date) is retained for compliance purposes.
- Technical logs: last sign-in kept for max 24 months.
6. Transfers outside the EU
Data is stored on Google Cloud Platform / Firebase with primary servers in Europe. Any transfers to the United States (referenced by some Firebase functions) take place in compliance with the Standard Contractual Clauses approved by the European Commission. For details: Firebase Privacy.
7. User rights
Under the GDPR (Arts. 15-22) you have the right to:
- Access — obtain a copy of your personal data.
- Rectification — request correction of inaccurate data.
- Erasure ("right to be forgotten") — request deletion of your account and all associated data.
- Portability — receive your data in a structured format (e.g. JSON of saved routes).
- Objection — object to processing for marketing purposes at any time.
- Complaint — lodge a complaint with the Italian Data Protection Authority.
To exercise your rights write to info@motopath.it. Response within 30 days.
8. Cookies and technical storage
The Planner uses only technical storage necessary for operation (Firebase Auth in-memory persistence: the session lives only in the browser tab, no persistent cookie is saved). No profiling cookies or third-party advertising trackers are used.
9. Third-party services used
- Firebase (Google Cloud) — Authentication + Firestore Database + Cloud Functions for account and route management.
- Stadia Maps — provides maps and Valhalla routing. See Stadia Privacy.
- Aruba S.p.A. — hosting of the motopath.it site.
10. Changes to this policy
Any material changes to this Privacy Policy will be communicated by email to registered users, with at least 15 days' notice before they take effect. The current version is always available at motopath.it/privacy-en.html.
11. Contact
For any questions regarding the processing of your personal data:
- Email: info@motopath.it
- Site: motopath.it
- Umami — website visit statistics, in aggregated and anonymous form: it uses no cookies, does not store full IP addresses and cannot identify individuals. For this reason no consent banner is required. See Umami Privacy.