How we handle your data while you're out there living your best van life.
We only collect what we need to make and mail your postcards (photos, approximate location, recipient addresses).
Your exact GPS coordinates are never stored or printed. We round everything to about 1 km so your secret spots stay secret.
Journey pages are off by default. A card only gets a public page if you turn it on for that card, and you can turn it off anytime.
You can delete your data anytime. When you delete your account, everything goes with it.
We keep things minimal. Here's what we gather to make RouteStamp work:
Location (rounded to ~1 km): We collect your approximate location to draw those route lines on your postcards. We never store your exact GPS coordinates. Your secret camping spots, boondocking finds, and that perfect cliff overlook? They stay secret.
Photos: Your postcard photos are stored securely. We strip EXIF metadata (including embedded GPS data) before storage to protect your privacy.
Recipient addresses: We need these to mail your postcards. Pretty straightforward.
Email address: For passwordless login and important account updates (like order confirmations). We won't spam you.
Your data has one job: making awesome postcards and getting them to the people you care about.
Making postcards: Your photos, route data, and messages come together to create your personalized postcards.
Sending emails: Order confirmations, magic login links, and occasional product updates (you can opt out).
Improving the product: Anonymous usage analytics help us make RouteStamp better for everyone on the road.
Each postcard can optionally include a QR code that opens a "journey page": a web page showing that card's photo, your message, your rounded route, and travel stats. A few things to know:
Off by default. A journey page only exists for a card if you turn it on while composing. No toggle, no page, no QR.
Public to anyone with the link. Journey pages don't require a login. Anyone who scans the QR or receives the link can see that card's content, plus any other cards you enabled journey pages for that were sent to the same person. Cards without the toggle never appear.
Not in search engines. We tell Google and other search engines not to index journey pages. They're for sharing with people, not for showing up in search results.
You can take it down anytime. Turn a journey page off (even after the card is mailed) and the page stops working immediately. The QR on the printed card will simply lead nowhere.
What we log about visitors. When someone views a journey page, we record a view count, the browser type, the referring site, and a scrambled version of their IP address that can't be turned back into the real one. We use this for view counts and abuse prevention, nothing else. Our analytics service (PostHog, listed below) also runs on these pages.
We work with a handful of trusted services to make RouteStamp possible. Here's who sees what:
PostGrid: Our printing and mailing partner. They receive recipient addresses, your message, and photos to print and mail your postcards.
postgrid.com/privacyStripe: Handles all payment processing. We never see or store your full card number.
stripe.com/privacyMapbox: Renders the route maps on your postcards. Only receives rounded coordinates (~1 km precision).
mapbox.com/legal/privacyPostHog: Product analytics to help us improve RouteStamp. Text inputs are masked. May include session replays and error reports.
posthog.com/privacyAWS S3: Secure cloud storage for your photos. All data is encrypted at rest.
aws.amazon.com/privacyOpen-Meteo: Weather data for your postcards. Only receives rounded coordinates.
open-meteo.com/en/termsNominatim/OpenStreetMap: Converts rounded coordinates into location names (like "Joshua Tree, CA"). Only receives rounded coordinates.
nominatim.org/aboutYou're in the driver's seat. Here's what you can control:
Location tracking: Opt-in only. You can toggle location sharing on or off anytime in your settings. No location, no route lines on postcards, but you can still use the service.
Journey pages: Per-card and opt-in. Turn one off anytime, even after the card is mailed, and it stops working on the spot.
Delete individual data: Remove specific photos, recipients, or postcards whenever you want.
Delete your account: Email us at support@routestamp.com and we'll delete your entire account along with all associated data. Cascade delete means everything goes: photos, recipients, orders, location history, journey pages and their view stats, the works.
We take security seriously. Here's how we protect your stuff:
Presigned URLs: Photo links are short-lived, signed, and unguessable. They expire quickly and can't be bookmarked.
No public photos unless you say so: The only way a photo becomes publicly viewable is a journey page you turned on for that card, and only for as long as you leave it on.
Passwordless authentication: We use magic links sent to your email. No passwords to steal, no credentials to leak.
Encrypted storage: All photos and data are encrypted at rest in AWS.
RouteStamp is for users 13 years and older. If you're under 13, you'll need to wait a few more years before hitting the road with us.
We keep your data until you tell us to delete it. When you delete your account, everything is permanently removed. No ghost data lingering in our systems.
Questions about your privacy? Want to delete your account? Just want to say hi? Reach out: