Privacy policy

The short version

This Privacy Policy explains how Formentia LLC ("we," "us") handles information when you use Astray (astray.to, app.astray.to, and related services).

There are no Astray accounts. We do not sell your location or trip history. We are not in the ad-targeting business. Privacy is baked into how the product works.

No account, nothing to sign up for

You can open the app and plan without creating a username or password. We do not maintain a user profile database of "you."

What stays on your device

Preferences you set in the app (display, planning mode, consents, and similar) stay in this browser on your device.

Saved trips and other trip records you keep in the app stay on your device. Map and places data you download for on-device planning stay on your device too.

The app reads your device location only when a feature you use needs it (for example, filling a stop or following in-app guidance). The browser asks permission first. Those coordinates stay on your device unless you plan or rejoin a route in server mode, in which case the needed start and target coordinates are part of that routing request. We do not run a background location diary.

Clearing site data, uninstalling the PWA, or using private browsing can erase this. We cannot restore it from our side because we do not hold a cloud copy of your saved trips.

If you export or share settings or saved trips, that copy leaves through your browser or another app you choose. We do not receive it, and it is not a backup on our servers. Whoever you send it to is outside this policy.

When planning talks to the server

In server mode, the app sends trip planning requests (endpoints, time budget, mode, and related parameters) to our routing API (api.astray.to) so we can return a scenic-vs-baseline comparison. Place search in server mode similarly queries our geocoder.

The service is designed to be stateless for trip content: we do not operate Astray as a trip diary or surveillance product, and we do not sell where you go. We use what reaches the API to answer that request. Operational infrastructure (load balancers, anti-abuse, TLS) may process ordinary request metadata the way any HTTPS service does, and only for as long as that job requires.

We cannot promise that every hop of the internet forgets instantly. The product intent is: solve the request, return the answer, move on.

When planning stays in your pocket

In on-device mode, routing and place search can run in your browser after you download map and places data. Once that data is on the device, planning the trip does not need to go to our servers.

Downloading that planning data still uses our content CDN (for example tiles.astray.to / object storage). That is fetching map bytes so the device can plan. Your trip history stays on the device.

The map you look at is a different pipe. As you pan and zoom, the app still loads display tiles from a map service. Those requests can show roughly where the map is pointed, the way any web map does. That does not change on-device planning, and it is not a trip diary on our side.

Optional handoff to Google Maps (or similar)

If you choose to send a route to an external navigation app, that app receives the trip endpoints (and whatever else the deep link includes). That is your choice, remembered locally after you consent in the app. Google's (or another provider's) privacy policy applies to what they do with that information.

Product analytics

Astray does not send product analytics in ordinary use. We do not run an advertising tracker.

If you choose to enable unfinished or experimental features, that choice includes anonymous performance samples (timings and coarse diagnostics) so we can see what broke. Those samples do not include trip coordinates, addresses, or the route line. Turn those features off to stop the samples. They are unsupported, and you use them at your own risk.

The marketing site does not hitch a ride with third-party ad trackers for "who you are."

Error reports (off unless you turn them on)

Separately from analytics, you can enable Error reports in the engine panel. When something fails, Astray may ask whether to send a privacy-safe report (app version, routing engine, coarse device class, and scrubbed error text). Reports are write-only: the app cannot read them back. We do not include trip coordinates, addresses, or route geometry.

You can decline any individual prompt, and you can turn the setting off again at any time.

Tiles, CDN, and the boring network stuff

Static assets, the PWA, and map tiles are served via normal web infrastructure (including Cloudflare and object storage). Those systems see IP addresses and standard request logs the way CDNs do. We use that for delivery, security, and abuse prevention. We do not use it to build a dossier of your road trips.

Astray is operated from the United States. Hosting and CDNs may process that request data in the United States and other countries. We do not use advertising cookies or ad pixels. Ordinary site storage and security measures may still apply so the Service works.

Your copies, your deletions, your questions

There is no Astray account, so we do not have a cloud profile of you to download or correct. What you keep in the app, you can export or erase on the device (including by clearing site data).

If you have a privacy question, write hello@astray.to. We will help with records we still have and can tie to your request. Because there is no account, that is often little or nothing besides an email you sent us. We delete what we still hold when we can, unless we must keep a sliver for security or law.

We do not sell your personal information, and we do not share it for cross-context advertising. Export, share, or maps handoff is you sending a copy, not us selling it.

If you are in the EEA, UK, or another place with similar privacy laws, you can also complain to your local data-protection authority.

Kids

Astray is not directed at children under 13 (or the higher digital-consent age where you live), and we do not knowingly collect personal information from children. If you think that happened, email us and we will help sort it out.

Policy changes

We may update this Privacy Policy. The version (2026-09-06) and effective date will change when we do. Material changes that affect how the app treats your data will be reflected in the product and, where we bump the Terms version, may require re-acceptance in the app.

Talk to a human

Operator: Formentia LLC, a Wyoming LLC. Email: hello@astray.to.

If you email us, we keep that thread long enough to answer you and handle any follow-up. If you have a privacy question, ask. We are small enough that the inbox still reaches a person.