Privacy Policy
Last updated: November 5, 2026
Planigator is a truck trip planner that runs in your browser. I do not sell your information. I run Google ads that bring people to this site, but I do not run ads on the site itself. I also keep short records of route lookup errors for 30 days so I can fix problems. They hold the time and the error, never your location. I do not build a marketing profile of you.
About. Built by a working OTR driver. Questions: support@planigator.help
What this website uses
This browser. Trips and driving preferences stay in this browser’s local storage unless you are signed in. Clearing site data deletes what is saved here.
My own links. If you open the site from an ad or a link I ran, I keep that link’s source, campaign, term, and content on this device and add one to a count of landings. A first Google sign-in adds one to a count of sign-ups for that same link. Those counts are totals only, with no name or email. Nothing is sent to Google, Meta, or any other ad company, and this site does not load their tags or pixels.
Sign-in. Google sign-in gives 40 free credits and stores the trips you save with that account on a Planigator server. It also stores the name and email from that Google account. If you sign in with a phone number, Google Firebase texts you a code to check the number, and I keep the number to know it's your account. If you sign in with an email code, I email a 6-digit code (and a sign-in link) from signin@planigator.help, and I keep that email address to know it's your account. Before I send a code, a human check runs on the page. To stop abuse, I keep a log of each code request (the email address, the IP address, the time, and whether it sent) for 30 days, and I limit how many codes one IP address or one email address can ask for. An hour with no taps signs that account out. Navigation counts as use, so a drive does not sign that account out. Planigator keeps a private list of those names, emails, credits used, credits left, and who used the site in the last hour. Only Planigator can see it. When you are signed in, the Miles driven counter is saved to your account as the miles driven each day, under a one-way scrambled ID of each of your devices, so the total adds up across them; nothing is counted when you are not signed in.
Inactive accounts. If you do not sign in for 365 days, I send one email to the address on the account saying it will be deleted on day 400 unless you sign in before then. On day 400 with no sign in, I permanently delete the account, its saved trips and data, and its credits, and you would have to sign up again. Any sign in resets the clock. Accounts without an email get no warning email but follow the same 400 day rule.
Credits. Address lookup and Calculate talk to a Planigator server that keeps your leftover credit count and sends the address or coordinates to HERE©. There is no Save a card offer and no extra credits for adding a card. Payment details are handled by Stripe at checkout, and nothing is charged without a purchase. Each HERE© answer uses 1 credit. A credit comes back only when HERE© does not answer.
Call log. Each address lookup and truck route is saved with the time, the address or the two points, whether HERE© answered, and which browser session sent it. That is so a HERE© bill can be matched to a person. The log does not include the HERE© key.
Visits. I do not keep a visit log, a tap timeline, or a live count of who is on the site. A request to record a visit or a tap log is refused, and nothing is saved. There are no tracking cookies and no third-party analytics.
Offline event log. When you are signed in, the app keeps a short list on this phone of: stops you mark done or arrive at (by stop id, and switched when earlier stops were marked done with that one), starting and ending navigation (by trip id), and your miles for the day (the day and the miles). They are saved on the phone with no signal and sent to Planigator when you are online. Each batch carries a random device ID this browser makes. Nothing is sent from a phone that is not signed in. No location, no addresses and no stop names are in them. Once sent, they are kept for 48 hours and then deleted.
Offline copy of the site. So Planigator can open with no signal, your browser keeps a backup copy of the site's own pages, scripts, and styles on this phone. It holds only the site files, not your trips, location, or account data. With signal the site always loads fresh, and each fresh load updates the copy. Clearing your browser's site data removes it.
Activity. While you're signed in, the app tells my server you're active: when you open the page or sign in, when you tap, type, or scroll (at most once a minute), and about every 4 to 5 minutes while navigation is on. It sends no trip, location, or screen details, only your sign-in and a second random ID this browser keeps for Planigator. The server notes the time and that browser, so an hour with no activity signs you out, a drive does not, and Planigator's private list (see Sign-in) can show who used the site in the last hour and on how many browsers.
Share links. After Calculate, Share this plan's link saves a copy of the trip on a Planigator server and gives you a short link, https://planigator.help/t/ and a code. The copy has the stops, times, the plan, and the settings needed to show it, plus your first name (if your account has one). Anyone with the link can open it. A link made on or after October 9, 2026 expires 30 days after it was made, and then it no longer opens. Links made before then do not expire.
Send to a Planigator member. When you are signed in, Send to a Planigator member saves that same copy on a Planigator server, in the other member's Plans shared with you list. It says Sent from with the name you save under Your name (optional) on the Account tab; if that is blank, the name on your Google account, or a Planigator member if it has none. A plan in that list expires 30 days after it was sent. The list holds up to 50 plans, and you can send up to 20 a day.
Your email address is never shown to the people you share a plan with. A shared plan does not include your email address or any other personal details beyond that name and those hours.
If you turn on notifications, I keep your browser's push address on my server to send them (navigation reminders stop after 2 hours).
Location. Only if you tap Start from my location, or Start navigation. The browser asks first. A point from Start from my location is used as the start of a HERE© truck route when you Calculate. During navigation, the moving position stays on this phone. It is not saved and it is not sent to Planigator.
Compass and motion. Start navigation asks the phone for compass and motion so the map can turn with the truck. The browser asks first. That heading stays on this phone. It is not saved and it is not sent to Planigator.
Face cam and Record screen. Face cam and Record screen run on your device in your browser. Screen recordings download or save to your device and are not uploaded to Planigator servers.
Connect Grok Bot and map Chat. If you connect your own Grok Bot on the Account tab, I keep your bot's webhook address, an optional webhook key, a reply token, the bot name, and your last 100 map chat messages with your account so the Chat panel can show them. When you send a message from the map Chat button, I send that message text to your Grok Bot at the webhook address you connected. I also send a reply address on planigator.help and a reply token so the bot can post its answer back into your map chat. If you saved a webhook key, I send that key with the request. I do not send your location, your trip, or your email. You can clear the chat or disconnect your Grok Bot at any time. Disconnect stops new messages from going to the bot and turns off its reply token. Only signed-in members can connect a bot, and I limit how many pairing tries and chat messages come in each hour to stop abuse.
Nav chat mic and YouTube box mic. When you tap the mic in Nav chat, I send that short recording to the Planigator server so it can be turned into text. The mic next to each YouTube box sends the audio the same way, with the same handling. I use the words only to fill that box or that chat, and I do not keep the recording.
Dictation audio. Voice typing works when you are signed in. Cloudflare voice typing costs 1 credit per use. On the Settings tab, under Voice typing, you pick how it works. With Phone, your phone or browser turns your voice into words and I get nothing but the words you send. With Cloudflare (the default), the recording goes from the Planigator server to Cloudflare's AI speech-to-text model, and only there, to turn it into words. With Grok (your own account), the recording goes from the Planigator server to xAI's speech-to-text with the xAI API key you saved, so xAI bills your own xAI account and xAI's own privacy policy covers that audio. I do not save the recording or the words on my server; the words come straight back to your screen.
Your xAI API key. If you save an xAI API key for voice typing, I check it with xAI once, then keep it encrypted on my server with your account. I never send it back to your phone or show it to anyone, I use it only for your own voice typing, and you can delete it anytime with Delete my key on the Settings tab. Deleting your account deletes it too.
HERE©. When you Calculate, the server sends those addresses or coordinates to HERE© Technologies for a truck-legal route (53-ft trailer, 80,000 lb, 13 ft 6 in). Route restrictions come from HERE© map data and can be out of date. Always obey posted signs. Truck only. Not car, bike, or walk. HERE©’s policy: legal.here.com/privacy
Place lists. Love's, Walmart, Cat scale, and truck stop lists are searched in this browser and do not use a credit. Love's, Walmart, and truck stop locations are from OpenStreetMap contributors. Cat scale locations are from the public CAT Scale list.
Payments. Credit packs are paid on Stripe’s checkout page. Payment details are handled by Stripe at checkout, and nothing is charged without a purchase. I do not see the full card number. Stripe’s policy: stripe.com/privacy
Third-party services
These are the outside services Planigator uses, and what each one receives.
Planigator server (planigator.help). Sign-in, credits, saved trips, shared plans, address lookup, routes, and Aura voice clips all go through it. It receives what is described above.
Cloudflare. Hosts this website and the Planigator server, so it handles each request your browser makes to them, like any web host. Aura voices are made with Cloudflare AI: the text of each phrase to be spoken (directions and stop names) is sent to the Planigator server, which makes the voice there. Aura voices use credits. If you choose Download at Start navigation, the Aura voice clips for that trip are saved on this phone so they can play with no signal. A line that plays is saved on this phone too.
HERE©. Truck routing and address and place search. The Planigator server sends HERE© the addresses, search words, or coordinates for each lookup or route. Your browser does not contact HERE©.
Google sign-in (accounts.google.com/gsi). The Sign in with Google button is loaded from Google. On the home page when you are signed out, I load it, and the demo video from YouTube, only after your first tap, key press or mouse wheel. When you sign in, Google sends Planigator the name and email on that Google account. Google’s policy: policies.google.com/privacy
Cloudflare Turnstile and Email Sending. The human check on the email sign-in is Cloudflare Turnstile, loaded from challenges.cloudflare.com. It checks that a person is signing in and does not track you for ads. The sign-in code email is sent through Cloudflare Email Sending, which gets your email address only to deliver that one email. Cloudflare’s policy: cloudflare.com/privacypolicy
YouTube (Sign in with YouTube). On the YouTube tab, Sign in with YouTube is only after you are signed into Planigator. It asks Google for permission to view your YouTube account (the read only youtube.readonly permission). With it, I read your Watch later list, your playlists, your subscriptions and your liked videos, and the videos in a playlist or channel you open, only so I can show them to you in the YouTube tab. That data goes straight from YouTube to your browser and is shown only to you. It is never sent to or stored on a Planigator server or any other server, and I never share it with anyone. To save your YouTube quota, your browser keeps a copy of those lists, and the short-lived access token Google gives it, in this device's own storage, separate for each Planigator account and tied to the YouTube channel it came from. That copy never leaves your device. The videos you save with + Later are kept only on your device too, separate for each account. If my server had an older copy of that list, your browser moves it to your device the first time you open the site after this change, and then I delete it from my server. I reuse it for 15 minutes, and Refresh always gets fresh lists. When you sign out of Planigator, I drop the saved token and keep the lists for when you sign back in. Sign out on the YouTube tab, or deleting your account, erases that copy from this device. I never post, upload, or change anything on your YouTube account. Google’s permission screen will say I can view your YouTube activity. It only lets the site show your feed and your lists to you, right on your phone. I can’t see any of it and YouTube doesn’t send watch history either. To remove access, tap Sign out on the YouTube tab, which revokes the token, or remove Planigator at myaccount.google.com/permissions. Videos and search on the YouTube tab use YouTube API Services, and your use is subject to the YouTube Terms of Service. Google’s policy: policies.google.com/privacy
Stripe. Payments for credit packs. Stripe receives the payment details you type on its checkout page.
Esri (server.arcgisonline.com). Satellite imagery and the road and place labels on it. Your browser asks Esri for the map tiles of the area on screen.
OpenFreeMap (tiles.openfreemap.org). The street map style and tiles, and the place names on the satellite map. Your browser asks OpenFreeMap for the map tiles of the area on screen. If you tap Download trip map for offline, the Planigator server gets the map files along your route from OpenFreeMap for you (OpenFreeMap sees the Planigator server, not your browser), and they are saved on this phone, up to 150 MB per trip, until you delete them.
BigDataCloud (api.bigdatacloud.net). When you search the map, the Planigator server may send BigDataCloud the center point of the map on screen (latitude and longitude only) to get the nearest town name, so results come from near where you are looking. It does not receive your name, email, or plans.
Google Maps and Google Earth search (google.com). When the other map search lookups cannot find a place, the Planigator server may send your search text to Google Maps search and Google Earth search to find it. If the map center is known, I also send the center point of the map on screen (latitude and longitude only) and may add the nearby town name to the search text, so results come from near where you are looking. It does not receive your name, email, or plans. Google’s policy: policies.google.com/privacy
Google Places (places.googleapis.com). When you spend credits on a Google place search, the Planigator server sends Google Places your search text and, if it is known, the center point of the map on screen (latitude and longitude only), so results come from within about 30 miles of where you are looking. It does not receive your name, email, or plans. Google’s policy: policies.google.com/privacy
Google Maps links. If you tap a Google Maps link on a place, it opens Google Maps (maps.google.com) with that place’s location. Google then sees that request the same as any visit to its site.
The map code (MapLibre) is served from planigator.help itself when a page with a map opens.
Open-Meteo (api.open-meteo.com). The weather, wind, and elevation button on the Nav map. While the Nav map is showing and location is already allowed, your browser sends Open-Meteo your approximate location, rounded to within about half a mile, then about every 10 minutes or 10 miles. It does not receive your name, email, or plans.
Map tile requests show these services your IP address and the part of the map you are looking at, the same as any website loading a picture. They do not receive your name, email, or plans.
Data protection and security
Encryption in transit. Every connection between your browser, Planigator, and Google or YouTube APIs is encrypted in transit using HTTPS (TLS 1.2 or higher).
Storage and encryption at rest. Account data and saved trips stored on the Planigator server are encrypted at rest using AES-256 encryption and isolated to your account. When you use Sign in with YouTube (the youtube.readonly permission), your YouTube playlists, subscriptions, liked videos, and Watch later list, and your Planigator + Later list, along with the short-lived Google OAuth access token, stay only on your device, in your browser’s own storage for your Planigator account. They are never transmitted to or stored on a Planigator server or any other external server. Sign out on the YouTube tab, or deleting your account, erases them from your device.
Access controls and protection of sensitive data. Signed-in sessions use random, unguessable session tokens that expire automatically after an hour of inactivity. Server keys and credentials are stored in encrypted server secrets and are never exposed in browser code. Access to server storage is restricted strictly to the automated Planigator server processes needed to load and save your account data. I do not share, sell, rent, or transfer your Google or YouTube data to any third party, and I never use it for advertising, profiling, or training artificial intelligence models.
Data retention, revocation, and deletion. YouTube data is never retained on Planigator servers. You can revoke YouTube access immediately by tapping Sign out on the YouTube tab or at myaccount.google.com/permissions. You can delete individual saved trips, memos, or map chat messages inside Planigator at any time. To delete your entire Planigator account and all data stored with it, open the Account tab, scroll to the bottom right above the planning aid disclaimer, press Delete account, review the warning that all of your data will be permanently deleted and any remaining credits will be lost, press Confirm delete, and let the 10-second cancel countdown finish (or press Cancel during the 10 seconds to keep your account), or email support@planigator.help.
Google API Services User Data Policy. Planigator’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What I do not do
I do not store location history, compass headings, or motion readings. Sign-in stores a credit balance and the trips you save to your account. Plans you share are stored as described under Share links and Send to a Planigator member. I do not sell, rent, or trade personal information.
Credits
The website gives 40 free credits the first time you sign in with Google, a phone number, or an email code. There is no Save a card offer and no extra credits for adding a card. Payment details are handled by Stripe at checkout, and nothing is charged without a purchase. Each HERE© answer uses 1 credit. A credit comes back only when HERE© does not answer. Extra packs are 186 credits at $1.49 or 1,500 credits at $12. Packs are one-time purchases. There is no subscription and nothing renews on its own. Used credits stay used. To limit the free daily credits for visitors who have not signed in, my server keeps a one-way scrambled copy (a hash) of your device ID and your IP address for that day; it cannot be turned back into either one and is deleted about an hour after the day ends.
Aura voices use credits too: about 5.14 credits per 1,000 characters of new speech, rounded up once per trip. A phrase already made is free. Start navigation holds those credits, and End navigation gives back what was not used.
Download trip map for offline is 2 credits per trip.
Refunds: email support@planigator.help with the Stripe receipt. Used credits are not refunded.
Age
Planigator is made for adult drivers 18 and older. If I learn that someone under 18 has given me personal information, I delete it.
Contact
Questions: support@planigator.help or the support page.