Back to the app
Last updated 1 October 2026
Holloway is a UK green lane and byway finder, a trading name of MLS Ventures Ltd (company number 16306630), the data controller for the purposes of this policy, see company information for registered details. This page explains what information Holloway collects, why, and how it's handled. It is written in plain language on purpose, if anything here is unclear, email hollowayapp@gmail.com and ask.
Using the map itself requires signing in with a free account, just an email address, no password, no card, and nothing else about you. The rest of the site, this page, the blog, trail riding guides, the Bike and Tyre Finder, and every review, doesn't need an account at all.
Signing in uses a passwordless "magic link" sent to your email address, handled by Supabase, our database provider. We collect and store:
We don't collect your name, a password (there isn't one), or any payment details. If you subscribe to Holloway Premium, payment is handled entirely by Stripe, a payment processor; Holloway never sees or stores your card details. We do store whether your account is on the free or paid plan, and a Stripe customer reference used to manage your subscription, both linked to your account.
Your bike/experience preset and distance-unit choice are stored only in your own browser, never sent to us.
When you sign in, or later in your Account, you can choose to get occasional emails from Holloway: news about the app, competitions and deals. It's off unless you tick the box or say yes, and saying no doesn't change anything else about your account.
If you opt in, we store that choice and the date you made it with your account. We send these emails through Resend, our email service provider, which receives only your email address for that purpose. Every email has an unsubscribe link, and you can turn them off at any time in Account. Deleting your account removes the choice along with everything else.
You can also sign up to Ride Brief, our monthly email, from a box on blog posts and guides, without an account. We keep only your email address and the date you signed up, held by our email provider, Resend, and use it for nothing but Ride Brief and the welcome email.
"Suggest a difficulty grade" and "Suggest a missing lane" don't need Holloway Premium, though you'll already be signed in to reach them, since that's required to use the map at all. If you choose to leave a different email address so we can follow up, we store it alongside your suggestion. It's visible only to Holloway's moderators, never published or shared. Suggestions, closure reports and video links are also linked to your account, so the ones a moderator approves count towards your giving-back badges.
If you use "Find lanes near me", your device's location is read directly by your browser and used only to show your position on the map and sort lanes by distance, it is never sent to or stored on our servers. If you enter a home postcode while planning a route ("Start from home"), that postcode is sent to postcodes.io, a free, independent UK postcode lookup service, to find its coordinates.
To work, Holloway's map and route planning make requests to a small number of other services on your behalf: MapTiler (map tiles), Open-Meteo (weather), openrouteservice (road-following route connectors, routed through our own server so your request never carries our API key), and Google Maps (only when you tap "Navigate", which opens Google's own site in a new tab). None of these receive your email or account information, only the map coordinates needed to do their job.
Holloway uses Google Analytics to understand how the site is used, which pages people read, roughly how many visitors we get, and where they come from, so we know what's actually useful and what to improve. This sets cookies and sends data to Google, but only after you actively accept it on the cookie banner shown on your first visit. If you reject or ignore the banner, Google Analytics never runs, no script is loaded and no cookie is set.
Google Analytics doesn't collect your name or email address, and we've never linked it to your Holloway account. What it can see is standard web analytics data: pages viewed, rough location (country/region level, from your IP address), device and browser type, and how you arrived at the site. This is processed by Google in line with their own privacy policy. You can change your decision at any time via the "Cookie settings" link below.
We don't sell or share your data with advertisers, we run no advertising trackers, and we don't send marketing email unless you've separately agreed to receive it.
We keep account data for as long as your account exists. If you delete your account (Menu → Account → Delete account), your profile, ridden log, ride dates, badges, saved routes, home postcode and profile photo are permanently removed straight away. Suggestions you've submitted stay in our moderation records, but aren't linked back to you once your account is deleted, aside from an email address you may have optionally left directly on the suggestion itself, which we don't proactively link to any account.
Under UK GDPR, you can ask to see, correct, or delete the personal data we hold about you at any time, beyond what the in-app delete option already covers. Email hollowayapp@gmail.com and we'll action it.
We'll update this page if what we collect or how we handle it changes, and update the date at the top.