Velosplit

Privacy: your GPX file stays in your browser

Velosplit plans your race in your browser. The GPX file you choose, your FTP, your weight and the plan built from them are never uploaded. This page lists the few things that do leave your browser, and who receives them.

Last updated 21 October 2026.

Who is responsible

Velosplit is run by Othigo AB, which is responsible for the data described on this page. To reach Othigo AB about anything here, use the Feedback button at the top of any page.

What stays in your browser

Reading the GPX file, the physics and the pacing all run in your browser. None of it is sent to a server.

So that a reload brings your plan back, Velosplit saves your last plan in your browser's local storage, under the key velosplit:plan:v1. It holds the GPX file's contents and name and the values in the form: FTP, weight, height, wind, goal time and the advanced settings. It stays on your device, and you can remove it by clearing this site's data in your browser settings.

Velosplit has no accounts, sets no cookies of its own and runs no analytics or advertising. Its fonts are served from its own domain rather than from a font provider.

What leaves your browser

Map tiles

The map is drawn from tiles that your browser requests from tile.openstreetmap.org, run by the OpenStreetMap Foundation. Like any web request, each one reveals your IP address and browser details to that server, along with which tiles you asked for, which reveals the area you are looking at. It does not receive your GPX file or your plan.

Each tile request also carries a referrer naming this site (the address of the page, without its path). That is deliberate: the OpenStreetMap tile usage policy requires clients to identify themselves, and sending the referrer is how Velosplit does that.

The feedback form

Nothing is sent until you press Send. Then your message, and the email address if you gave one, go to Velosplit's feedback endpoint, which emails them to Othigo AB. Your email address is optional and is used only to reply. The endpoint does not store the message anywhere else, and the code does not write your message or address to any log.

Feedback emails are not deleted on a schedule. They are kept untilOthigo AB deletes them, and you can ask for yours to be removed. The form does not need any personal information, so please do not include any in your message, and in particular nothing sensitive such as health details.

The form uses Cloudflare Turnstile to tell people from bots. It loads only when you open the form. Turnstile processes details such as your IP address and browser characteristics to make that decision, may use its own technical storage in your browser for it, and Velosplit passes your IP address to Cloudflare with the check. To limit abuse, the endpoint also rate-limits submissions by IP address. See Cloudflare's privacy policy for how it handles that data.

Cloudflare, which hosts the site

Velosplit is served by Cloudflare, which processes every request to the site as any host does. The pages and files themselves are served from Cloudflare's cache without running any Velosplit code. Logging is switched on for the small Worker that handles the feedback form, so Cloudflare records the requests that reach it, meaning feedback submissions and requests for addresses that do not exist, along with any errors. Those records can include details such as the address requested, your IP address and your browser.

What Velosplit does not do

  • It does not upload your GPX file or your plan.
  • It does not set cookies of its own, or run analytics or advertising.
  • It does not ask you to create an account.
  • It does not sell your data or pass it to advertisers.

Questions

If anything here is unclear, or you want a message you sent removed, use the Feedback button at the top of any page and Othigo AB will deal with it.