Privacy Policy

Account details: if you create an account, we store your email address and a securely hashed password. That's it. No name is required.

Your data: vehicles, fuel fill-ups and price alerts you choose to save. This is yours; it stays tied to your account and is never sold.

Location: if you allow it, your device shares your location with the map so we can show nearby fuel. We do not store your location on our servers.

Analytics: aggregate only, and it comes from our host, not our code. Lovable. The platform that serves this site, adds a small script to every page that counts page views, referring sites, device types and countries. We see totals, never identities. We run no analytics of our own and no advertising trackers: not Google Analytics, and not any of the privacy-friendly alternatives either.

Crash reports: if the app breaks in your browser, it sends us the error message, the stack trace and the page it happened on, so the bug can be fixed. See “When the app crashes” below for what is stripped out first.

Some parts of the map are answered by other people's servers, and your browser asks them directly. Here is every one of them, what you did to trigger it, and what it gets.

Lovable (our hosting platform): You load any page. The host injects a small measurement script (/~flock.js) into every page it serves. It is not part of our code. Which pages are viewed, the site that referred you, your device type and your country, as aggregate counts. It reports through this domain, and Lovable serves the site, so it sees your IP address either way.

Valhalla (OpenStreetMap Germany): You plan a route on the map, start drive mode, or the app routes around a low bridge. The coordinates of your start, any stops and your destination, and for a truck its height, weight and length, so the route avoids what it cannot fit under. Not your name or account.

Photon (Komoot): You search for an address, suburb or town. What you typed, and, when the app already knows where you are. Your position rounded to about 11 metres, so nearby results come first.

Nominatim (OpenStreetMap): You search for an address and the first geocoder does not answer. What you typed. Not your position.

OpenFreeMap: The map draws its street background. Which map tiles you asked for, which is roughly the area you are looking at.

Esri: You switch the map to satellite. The same: which tiles, and so roughly where you are looking.

These requests go straight from your device, so each of these services also sees your IP address. We do not send them your account, your email or anything you have saved.

We are working to run the routing and address search ourselves so these requests stop leaving at all.

So the map still works out of range, WayBeacon saves some things in your browser's own storage. None of it is sent to us and none of it can be read by other websites.

The app itself: the page and the code needed to start, plus the map tiles you have already looked at, so the app opens without a connection instead of showing a browser error.

Recent prices: the fuel stations nearest to where you last used the map, a few hundred of them, kept for at most seven days. When you are out of signal these are what the map shows, labelled with their age so you know they are not live.

Your settings: the fuel type, filters and map style you chose.

Clearing your browser's site data for WayBeacon removes all of it. Signed-in pages are never saved this way.

To run the app: show you fuel prices, save your logbook and vehicles, and send the price alerts you set up.

To contact you: transactional emails only: account confirmation, password resets, and alerts you asked for. We will not spam you.

We never sell your personal information, and we never share it with advertisers.

If something breaks while you are using WayBeacon, your browser sends us a short report so we can fix it: the error message, the stack trace, the mechanism, your browser's user-agent string, and the path of the page you were on.

Before anything is sent, the report is stripped of anything that could locate or identify you. Coordinates in any form, email addresses and access tokens are replaced with markers, and the query string is dropped entirely rather than cleaned, because on the map it is almost always your position. So a crash on a route to your home is recorded as the path “/map”, and nothing else about where you were.

No user ID, no IP address and no session identifier is attached, so a crash report cannot be traced back to your account.

These reports go to our own database in Australia. There is no third-party crash reporting service involved, no Sentry, Bugsnag or Datadog, so the reports are not shared with anyone. They are deleted automatically after 30 days.

Fuel prices come from NSW Government FuelCheck, Service Victoria Servo Saver, Queensland Government fuel price reporting, WA FuelWatch, SA Fuel Pricing Information Scheme and Department of Treasury and Finance (Northern Territory Government), MyFuel NT, and the rest of the map from other government and open datasets. The full register is on the about page. All of it is displayed with attribution. We are not affiliated with or endorsed by any government body.

Prices are provided as-is and may be delayed or incorrect. Always confirm the price at the bowser.

Your data is stored in Supabase (PostgreSQL) hosted in Australia, protected by row-level security so only you can read your own records. Passwords are hashed; we never see them.

No system is perfectly secure, but we take reasonable steps to protect your information.

You can access, correct or export your data from your account at any time.

You can delete your account, which permanently removes your email, vehicles, fill-ups and alerts. Use the contact form on this site if you need help.

If we update this policy we'll change the date above and, for material changes, notify signed-in users. Continued use means you accept the current version.