Privacy Policy

WatchTrace · Last updated: 5 October 2026

WatchTrace is an app for Garmin watches (Connect IQ), Wear OS watches and Android phones, plus a companion website (stepsbattle.com/watchtrace) that lets you create routes and follow them on your watch or phone. This policy explains what we collect, why, and your choices. If you do not agree, please do not use the app.

What we collect

• Device identifier. When the app contacts our server it sends an identifier of your device: on Garmin, the watch's unique identifier; on Wear OS and Android, a random identifier the app creates when it is first opened. We store it only as a one-way hash to link your routes and activities to your account.
• Routes. The routes you create or import (coordinates and elevation) and their name.
• Activities. If you choose "Finish & save", we receive a summary of that activity (sport, duration, distance, elevation, and which route you followed) and the track you walked, so you can see it on the website. Nothing is sent if you discard the activity.
• Optional account details. If you create a web account: a nickname, and optionally an email and password (stored hashed). These are optional and used to let you sign in from any browser, and to connect your phone to the account of your watch (in the Android app you can type that email and password, or a one-time code from the website).
• Basic usage data. Timestamps and counts of app use (last seen, number of requests) to operate and improve the service.

Location data

The app uses your device's GPS to show your position on the route and to record activities. On Wear OS and Android, recording continues with the screen off through a visible notification, and only after you press Start. Your location is not tracked in the background and is not stored on our servers, except the track of an activity you choose to save (see above) and these two cases, used only in the moment:

• Map background (optional). When you enable the real map background, the app asks our server for the map tiles around your position, so the server learns the area you are in.
• Route creation. When you draw a route with "snap to roads", the waypoints you place are sent to a routing service to follow real roads/paths.

The website's "Follow me" feature uses your browser's location only inside your browser to show your position on the map; it is not sent to our servers.

Third-party services

• MapTiler — provides map tiles for the map background. Coordinates are sent to fetch tiles.
• OpenRouteService — provides road/path routing and surface/elevation for the route editor.
• Garmin Connect / Strava — on Garmin watches, recorded activities are saved on your watch and synced by Garmin to Garmin Connect (and to Strava if you have linked them). That sync is handled by Garmin under their own policies, not by us.

How we use the data

Only to provide the service: store and send your routes to your watch, render maps, record and show your activities, run your (optional) account, and keep the service working. We do not sell your data and we do not use it for advertising.

Sharing

Data is not shared with third parties except the service providers above. If you use "Share route", that route becomes viewable by anyone with the public link you generate; you can stop sharing by deleting the route.

Security & retention

Data is stored on our server. Passwords are hashed (bcrypt) and the device identifier is hashed. We keep your data while your account/device is active. You can request deletion of your routes, activities and account at any time.

Your choices

• Delete individual routes or activities from the website at any time.
• Turn the map background off to avoid sending coordinates for map images.
• Delete your account and all your data — immediately if you are signed in, or by request if you are not.
• Request full deletion of your data by emailing us (below).

Children

WatchTrace is not directed to children under 13 and we do not knowingly collect their data.

Changes

We may update this policy; the "Last updated" date will change. Continued use after an update means you accept the revised policy.

Contact

Questions or deletion requests: [email protected].