Website cookies

Current website configuration

This Panya Routes website contains no application code that sets a cookie and includes no advertising pixel, social media tracker, account session or A/B testing script.

The site serves its font files from the Panya Routes origin. Public route data is read by the server before the page is returned. Approved route media can be served from the public media origin named in the deployed site configuration.

Page view counts

The site counts page views with Vercel Web Analytics, run by Vercel, which hosts the site. Its script is served from the Panya Routes origin. For each page view it sends Vercel the page address, the page you came from, your browser, operating system and device type, and the country worked out from your IP address. It sets no cookie and stores nothing in your browser. Vercel tells visits apart with a hash of the request that changes every day, and does not keep your IP address with the count. We see totals, never individual people.

The satellite map on route pages

A route page shows its line drawn by the site. If you choose Open Satellite Map, the browser fetches the Mapbox GL JS library, map styles and satellite tiles directly from Mapbox, and the library sends Mapbox a map-load event, which Mapbox uses to count map loads. Those requests carry the same technical data as any web request. The library keeps an anonymous identifier and the time of its last map-load event in the browser’s local storage for this site, so the event is not repeated on every visit. It sets no cookie. Nothing loads from Mapbox until you choose the map.

The check on the beta form

The beta sign-up page, and no other page, loads Cloudflare Turnstile, which checks that a person, not an automated script, is filling in the form. It runs in a frame served by Cloudflare and uses your IP address and signals from your browser to do this. The site receives only the result. Turnstile is not used to track you across sites.

Request processing

A web request still carries technical data such as the requested URL, IP address, user agent and time. Hosting and infrastructure providers process that data to return the page and protect the service.

Scope

This document covers the public website only. How the mobile app and the website handle personal data is set out in the Privacy Policy.

If the website starts using cookies, or loads anything else from a third party, this revision must be replaced before that change reaches production.