Privacy Policy
Effective Date: October 22, 2026
1. Introduction
This Privacy Policy describes how Two Wheel Junction ("we," "us," or "our") handles information in connection with your use of our website, the content we publish, and the Bike Law Pocket Guide: its apps for iOS and macOS, Android, and Windows, its web app at blpg.twowheeljunction.com, and the API (our server) behind them (collectively, the "Services"). We are committed to protecting your privacy and being transparent about our data practices.
Please read this Privacy Policy carefully. By using our Services, you agree to the practices described herein.
2. Information We Collect
2.1 Information You Provide
Two Wheel Junction is a read-only publication. The public site has no comment, contact, or subscription forms, and browsing it requires no account. The site itself therefore does not collect, store, or process any personally identifiable information that you provide to us, including:
- Names, email addresses, or contact details
- Financial or payment information
- Government-issued identification numbers
- Biometric data or health information
The exception is the Bike Law Pocket Guide. If you create an account in it or file an incident report, you give us information such as your email address. Sections 2.5 to 2.7 describe what we keep, and section 3.2 describes who can see your reports.
2.2 Information Collected Automatically
Like virtually all websites, our web servers, including those that run the Bike Law Pocket Guide web app and API, record standard technical information each time a page, file, or API request is made. These server logs may include your IP address, browser type and version, the page requested, the referring page, and the date and time of the request. This information is used only to operate, secure, and troubleshoot the Services, and to compile aggregate usage statistics. We do not use it to build profiles of individual visitors, and we do not combine it with any other information to identify you.
2.3 Bike Law Pocket Guide Usage Log
Each time our API is asked for a state's laws or for the advocacy events calendar, as the Bike Law Pocket Guide apps do, we record three things: the time, which of the two was requested, and the US state requested, if any.
The log records nothing about you: no IP address, no device or app information, and no account. Our admin tools show it only as totals per state, which tell us where to focus. Each entry is deleted after 90 days.
One caveat: the apps may choose the state from your device's location (see section 2.4), so the state requested may reflect where you are. It is still not linked to you or your device.
2.4 Location
If you allow it, the Bike Law Pocket Guide apps use your device's location to pick your state and, when you capture a location for an incident report, to add that location to the report. This happens on your device, with one exception: to turn coordinates into a state or street address, the iOS, macOS, and Android apps use the geocoding service built into the operating system, which may send the coordinates to Apple or Google under their own privacy policies. The web app works out your state inside your browser.
Your location reaches our servers only inside an incident report you choose to submit, including any location stored in files you attach to it (see section 2.6), and indirectly as the state requested in the usage log (see section 2.3).
2.5 Bike Law Pocket Guide Accounts
You do not need an account to read the laws or the calendar. If you create one, we store:
- Your email address, which is also your sign-in name
- Your password, stored only as a one-way hash, never as the password itself
- A display name, if you give one
- The role we assign to the account, such as whether it belongs to an attorney or to one of our administrators
- Basic security records, such as recent failed sign-in attempts
If you turn on two-factor authentication, we also store your authenticator secret and your recovery codes.
We do not ask for your phone number, address, or age, and we do not send email or text messages.
2.6 Incident Reports and Attachments
An incident report holds a title, a description, the date and time, the state, a description of the location, and optionally a ZIP code and map coordinates. We also assign each report to a region, worked out from its state and, in some states, its ZIP code. A report is linked to your account and to the account of anyone added to it.
Anything you type about other people, such as names, contact details, license plate numbers, or vehicle details, is stored as part of your report.
You can attach photos, video, audio, and PDF files. We store them exactly as uploaded, with their file names, in private cloud storage. That includes any metadata inside them, such as the location where a photo was taken. We do not remove it.
2.7 Attorney Region Subscriptions
Attorneys can hold a subscription for a region. For each one we record the region, its start and end dates, the amount paid, and a payment reference such as an invoice number. Payment is arranged outside the apps, and we never handle card details. Only the attorney and our administrators see these records. Other signed-in users see only whether a region is held, and until when.
2.8 Cookies and Browser Storage
We do not use cookies. Apart from the usage log described in section 2.3, we do not use analytics, advertising, tracking pixels, or third-party tracking scripts of any kind, and the Bike Law Pocket Guide apps contain no analytics, advertising, or crash-reporting software.
The website stores nothing in your browser's local or session storage.
The Bike Law Pocket Guide web app does store data in your browser. It remembers the state you chose and your calendar setting, and keeps copies of the laws, the calendar, its own files, and law illustrations so it works offline. If you use its account deletion page, it holds your sign-in token only long enough to delete the account. This stays in your browser and is not used to track you. You can clear it in your browser's settings.
3. Data Sharing and Sale
3.1 Our Commitment
We will never sell, rent, or trade your data. We believe your data belongs to you. We share it only as this policy describes: incident reports with the people listed in section 3.2, our service providers in section 3.3, and the limited exceptions in section 3.4.
3.2 Who Can See an Incident Report
No incident report is public. A report can be read by:
- You
- Anyone added to the report by you or by another person who can edit it. They can also edit the report and add others.
- Our administrators
- Attorneys who hold a subscription for the region the report falls in (see section 2.7). They can read the report but not change it. An attorney may also register interest in a report, which lists them on it.
Everyone who can read a report sees the email address and display name of each person on it, its location, including any coordinates, and its attachments. Attorneys' access comes with their subscription: you are not asked first, and we do not notify you when someone reads your report.
3.3 Service Providers
The Bike Law Pocket Guide runs on Microsoft Azure, which hosts our servers, database, and file storage, where accounts, incident reports, and attachments are kept.
When our staff add an event to the advocacy calendar, its street address is sent to the US Census Bureau's geocoder to look up its map position. No user data is ever sent there.
3.4 Exceptions
We may disclose information only in the following limited circumstances, and only to the extent required:
- To comply with applicable laws, regulations, or valid legal processes
- To protect the rights, property, or safety of Two Wheel Junction, our readers, or the public
- In connection with a merger, acquisition, or sale of assets — in which case we will notify readers in advance
4. Data Retention and Deletion
We consider the data you send us to be yours, not ours, and you decide whether it stays. You can delete your Bike Law Pocket Guide account from any of the apps or from the web app, using your password and, if you use one, your two-factor code. Deleting your account removes:
- Your account and its sign-in details
- Your two-factor authentication data
- Your place on any reports you were added to
- Any region subscriptions you hold
You also choose what happens to the reports you created: delete them, with their attachments, or keep them without your name. Deleting them removes them for everyone on them. Kept reports remain readable by the other people on them, our administrators, and region attorneys, with no fixed deletion date. Files you attached to other people's reports are kept without your name. Text inside a report that mentions you is not changed.
To delete a single report or attachment, or if you cannot sign in, email us at the address in section 9.
The usage log described in section 2.3 is kept for 90 days. It holds nothing that identifies you.
5. Data Security
We maintain appropriate technical and organizational security measures to protect our Services and any information that passes through them. In particular:
- Passwords are stored only as one-way hashes
- You can turn on two-factor authentication for your account
- The Bike Law Pocket Guide apps connect to our servers over encrypted HTTPS connections
- Changing your password or two-factor settings ends every existing sign-in
We regularly review and update our security practices to address emerging threats.
6. Third-Party Services and Embedded Content
Our Services contain links to third-party websites, and some pages include content supplied by third parties. In particular, certain product pages embed a PayPal donation button, which loads images from PayPal's servers and, if you choose to use it, sends you to PayPal to complete a payment. We never see or handle the details of that payment. This Privacy Policy applies only to our Services. We encourage you to review the privacy policies of any third-party services you use, as we have no control over their data practices.
7. Children's Privacy
Our Services are not directed to individuals under the age of 13. We do not knowingly collect any information from children. If you believe a child has provided us with any information, please contact us immediately so we can address it.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page and, where appropriate, notify you through our Services or by other means. We encourage you to review this policy periodically to stay informed about our practices.
9. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: support@twowheeljunction.com
This Privacy Policy is provided for informational purposes and does not constitute legal advice.