Privacy
Routes collects almost nothing, and this page says exactly what. Last updated October 26, 2026.
DRAFT · WRITTEN IN PLAIN ENGLISH · TO BE REVIEWED BY COUNSEL BEFORE ANY PAID TIER LAUNCHES
What we collect
If you only read the map: nothing that identifies you. Which stations you have marked as read is stored in your own browser (local storage) and never leaves it unless you sign in.
If you join the email list: your email address and which page you joined from. That is the whole record.
If you sign in: your email address, the list of stations you have marked as read, and the route you have active, so they follow you between devices. Sign-in is by a one-time link sent to your email. We never see or store a password.
What we never ask for: account balances, account numbers, income, holdings, Social Security numbers, or anything about your financial situation. If a page on this site ever asks for those, it is not ours.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't run ad networks or tracking pixels. We don't have affiliate relationships, so there is nobody to pass your email to. No affiliate links. No sponsored products. Routes is not paid when you sign up for anything.
Who processes it
Routes runs on a few services that store or move data on our behalf. Each is bound by its own contract to use the data only to provide the service to us.
- Supabase hosts the database (emails, read progress, active route) and sends sign-in links.
- Vercel hosts the website and keeps standard server logs (IP address, page requested, time) for a short period to run and secure the site.
- An email sending service delivers sign-in links and, if you joined the list, the weekly card.
If we add a payment processor for a paid tier, it will handle card details directly; Routes will not see or store card numbers. This page will be updated first.
Cookies
If you sign in, a session cookie keeps you signed in. That is the only cookie we set. We don't use analytics or advertising cookies.
If you join the list you get one card a week and the occasional note when a figure on a card changes. Every email has an unsubscribe link, and unsubscribing removes your address from the list.
Your choices
- See your data: everything we hold about you is your email, your read list, and your active route. Email us and we'll send it.
- Delete it: email us from the address on the account and we'll delete the account, the read list, and the list subscription within 30 days. Clearing your browser storage removes the local copy.
- Leave the list: use the unsubscribe link in any email.
Residents of California, Colorado, Virginia, and other states with privacy laws have the rights those laws provide. The choices above cover them; nothing we collect is sold or used for targeted advertising.
Children
Routes is written for a general audience and is not directed at children under 13. We don't knowingly collect information from anyone under 13. If you believe a child has given us an email address, write to us and we'll remove it.
Security
Data is stored with row-level access controls so an account can only read its own rows, and connections are encrypted in transit. No system is perfect; if there is ever a breach affecting your data we will tell you.
Changes
If this page changes in a way that matters, the date at the top moves and the email list hears about it before it takes effect.
Contact
Questions or requests: hello@routesmoney.com.
EDUCATIONAL ONLY. NOT INVESTMENT, TAX, OR LEGAL ADVICE, AND NOT PERSONALIZED TO YOU.