Privacy is a feature
How does the privacy work?
The short answer is on the home page. This page gives the long one: the mechanics of the trim, the reasoning behind the ranking ban, and the commitments made for what does not ship today.
The end trim, step by step
The start and finish of a recorded route are hidden by removing whatever falls inside a circle drawn around each end; the middle section is published as it is. The radius is drawn separately for every publication, from between 400 and 700 metres.
The trim is drawn again on every publish — so the real end cannot be narrowed down where two links overlap. Publish the same ride twice and the two ends are still not cut in the same place.
Top speed enters no publication: the share card's data type has no such field. That is structure, not preference — where there is no field, there is no value to leak.
The map key is not in the app: tiles pass through our own proxy, and the provider never sees the rider's IP.
A road is not a track. There is no leaderboard.
Put up a table that rewards the fastest lap, people ride for the table, and someone dies. On public roads there is no ranking by time or speed — in no vehicle class, at no point.
These are commitments — not a list of what ships today
- If a segment is ever ranked, the measure will be consistency and discovery; never speed.
- A route reported as dangerous is taken down.
- Location data sits in a separate schema and is deleted for good when the account is deleted.
The short version, with the trim diagram, is on the home page: İz home.