The honest, plain-language version — no legalese.
Last updated September 3, 2026.
Creating an account collects your email address, a hashed password (we never store or see your plaintext password), and your subscription tier.
The coordinates and waypoints you send to the API are passed to OSRM or VROOM to compute a route or solve a VRP, and the response is sent back to you.
We keep copies of your requests for 24 hours. This powers your account dashboard (recent request history, usage stats) and helps us debug issues. After 24 hours, request logs are automatically deleted.
Database backups (which may include recent request logs) are retained for 30 days for disaster-recovery purposes, then deleted. These backups aren't used for day-to-day operations — just to restore service if something goes badly wrong.
Separately, we keep anonymized, aggregate data — like which country a request came from and which service was used — for 15 days. This data has no coordinates or account information attached; it's used only to monitor system performance and usage trends.
If a request causes an error, our error-tracking tool (Sentry) may also capture it temporarily to help us debug what went wrong.
We set a first-party cookie (sr_attrib) on your first visit to see which page and marketing campaign (if any) brought you here — things like UTM parameters, referrer, and the first page you landed on. It expires after about 90 days and is only used to understand which of our own marketing efforts are working. We also use standard session and login cookies to keep you signed in.
Our infrastructure is hosted in Germany. We use a small set of third-party services to run Simple Routing, and we've tried to pick ones that respect your data:
We don't sell your data to anyone, and we don't share it with third parties beyond what's needed to run the service, as listed above.
Want to see what data we have on you, or have it deleted? Email [email protected] and we'll take care of it — no forms, no runaround.