Legal
Cookies and storage
Last updated 23 October 2026
Traceway uses only the cookies it needs to work. There are no advertising, analytics, or tracking cookies, and none from another company.
The pages of this site, like this one, set no cookies. They ask before they count your visit with Cloudflare Web Analytics, which sets no cookie either. The planner sets the cookies below, and never counts visits. Its daily totals of what is used need no cookie and never say who.
Cookies
- __Host-traceway-session keeps you signed in while you use the planner. Only traceway.online can read it, and only over a secure connection. It ends when you log out, or 2 hours after you last used Traceway.
- XSRF-TOKEN protects your forms, so another site cannot send them in your name. It lasts as long as the session.
- remember_web_… is set only when you tick “Remember me”. It keeps you signed in for up to 400 days, or until you log out.
- appearance remembers light, dark, or the same as your device. It lasts a year.
- last_sign_in remembers whether you last logged in on this browser with your password, a passkey, or a connected account, and which one, so the log in page can mark it. It holds only that word, not who you are, and lasts 400 days.
- finish_sign_up is set only when you open an account with another service, such as OpenStreetMap, and Traceway emails you a link to finish it. It holds a random code, not who you are, so that the link connects the service only in this browser. It lasts up to 60 minutes.
Storage in your browser
A few things are kept in your own browser’s storage. They stay on your device.
- traceway.planner… keeps the route you were planning, so it is still there when you come back, and the last few places you picked in a search. It is cleared when you log out.
- traceway.library.layout remembers whether your library shows a grid, a map, or a list.
- appearance keeps your light or dark choice here too.
- traceway.consent remembers whether you said yes or no to counting your visit, and when, so the pages of this site do not ask again for a year.
Logging in with another service
When you log in with an account at another service, such as Google or GitHub, you go to that service’s own page. It may set its own cookies there, under its own policy. Traceway sets none for it, apart from last_sign_in and finish_sign_up above.
The map
The map itself comes from OpenFreeMap. Your browser fetches it directly, so OpenFreeMap sees your IP address, as any website does. Traceway shares nothing else about you with it, and place names come through Traceway. The privacy policy has more.
Your choice
The planner’s cookies are needed for Traceway to work, or keep a choice you made, so EU and Belgian law does not ask for your consent. You can still delete them in your browser settings at any time. You will then be logged out, and the planner forgets your choices.
Counting your visit is up to you. Say yes or no when the pages of this site ask, and change your mind at any time with Cookie choice at the bottom of every page. The privacy policy has more.