Your file is processed and forgotten
This policy explains what GPX MAP does with the data it receives. It is written to be read, and it is short because the service keeps very little. Last updated 21 September 2026.
1. Your GPX or KML file
When you upload a file it is received in memory, parsed, turned into the result page (or, for the KML converter, into the GPX file you download) and discarded. It is never written to disk, never stored in a database and never kept after the response is sent. Nobody, including the operator of this service, can retrieve a file after you have uploaded it. If you want to see the map again, you upload the file again.
The result page you receive contains the coordinates of your track, in simplified form for drawing, and the statistics derived from it. That page exists only in your browser. Sharing it means sharing that data; the service itself provides no sharing links.
2. What the server logs
Like any web server, this one keeps operational logs so that faults can be diagnosed. For each request the log records the HTTP method, the path, the response status, the duration and a random request ID. For an upload it also records the file size, the number of points, the number of segments, the total distance and how long parsing took. When a file is rejected, the technical reason is logged.
The logs never contain the file itself, the coordinates, the route name, timestamps from the file, or the file's name. Logs are retained only as long as needed for operations and are not used for analytics or profiling.
3. Cookies and tracking
GPX MAP uses Google Analytics to count visits and see which pages are used, so the service can be improved. Google Analytics sets cookies in your browser and sends your page views, together with your IP address and browser details, to Google, which processes them under its own privacy policy. The measurements are aggregated; they never include your files, your routes or the links you paste. You can block analytics with a content blocker or by disabling JavaScript; the upload form still works.
Beyond that there are no advertising or tracking scripts, and no accounts, so there is nothing to log in to and no profile to build.
4. Third parties your browser talks to
When you paste a link shared from Google Maps, the server itself contacts Google once to resolve it: it follows the redirect of a short link and, for a My Maps link, downloads the map's KML. For directions, the server also sends the coordinates of the stops and the travel mode you chose to the Google Routes API once, to obtain the road between them. Google sees the link, the stops and the server's address, not yours. The server contacts no other third party on your behalf apart from the Cloudflare check described above.
The pages are served from this site. To display them, your browser also loads resources from Google:
- Google Maps Platform provides the map tiles and the map JavaScript on the result page. Your browser requests tiles for the area of your route, so Google learns the approximate area you are viewing along with your IP address and browser details. The track itself is drawn by your browser and is not uploaded to Google by this service. Google's use of that data is governed by the Google Privacy Policy.
- Google Fonts serves the typeface used on these pages. Your browser requests the font files from Google, which receives your IP address and browser details in the process.
- Cloudflare Turnstile protects the upload form against automated abuse. Your browser loads a small script from Cloudflare, which may evaluate browser signals to tell people from bots and occasionally asks you to click a checkbox. The resulting token is sent with your upload and the server confirms it with Cloudflare, passing along your IP address. Cloudflare's processing is governed by the Cloudflare Privacy Policy. No file content is involved in this check.
The "Open in" menu offers links to Google Maps and Apple Maps. Nothing is sent to those services unless you click a link; clicking one sends the start, finish and via coordinates of your route to that provider, whose own privacy terms then apply.
5. Data you should think about before uploading
A GPX file can reveal where you live, work or park, and when you were there. Because the service stores nothing, uploading is low-risk, but the resulting page shows those locations on a map. Treat the page like you would treat the file itself.
6. Legal basis and your rights
Where data protection law such as the GDPR applies, the brief processing of your file is carried out to provide the service you requested, and operational logging is carried out in the legitimate interest of running the service securely. Since files are not retained and logs contain no content from them, there is normally nothing to access, correct or delete. You can contact the operator of this site with any question about your data.
7. Changes
If this policy changes, the new version will be published on this page with an updated date. Continued use of the service after a change means you accept the updated policy.