← Back to the map

Privacy

Last updated 22 August 2026

BushBash is made by Skippra Ltd (NZBN 9429053798121), in New Zealand. This page says exactly what we collect and what we do not. It is short because we collect very little.

No cookies. No tracking across sites. No advertising. BushBash sets no cookies and stores nothing on your device for the purpose of identifying you. We cannot tell whether you have visited before, and we cannot follow you anywhere else on the internet.

Using the map without an account

You can use the whole map without signing in. When you do, we record anonymous information about how the site is used, so we know what to fix and what to build:

How that stays anonymous

To count visits without identifying people, each event carries a code derived from your IP address and browser, mixed with a secret and the current date. Three things follow from that, and they are the whole design:

This information is not linked to any account, and it is deleted after 400 days.

If you create an account

An account is optional and exists only so you can save pins. If you make one:

Your email address
Stored, because it is how you sign in. There is no password — we email you a six-digit code instead, so there is no password to leak or reset. The codes themselves are stored only as a one-way hash and expire in 15 minutes.
Your sign-in session
Kept as a one-way hash for up to 90 days, so you are not asked to sign in constantly. Signing out deletes it immediately.
Pins you save
The name, note, type and location you chose. Pins marked private are only ever visible to you. Pins you choose to share publicly are screened automatically before they appear, and a moderator may review them.

Your location

If you press Locate me, your browser asks your permission and then tells the page where you are so it can draw you on the map. That position is used in the page and is not sent to us — unless you deliberately save a pin, in which case the pin's location is saved, because that is what saving a pin means.

The iOS app works the same way. Your position is used on the device to show you on the map and is not transmitted.

Directions

When you ask for directions, the start and destination you chose are sent to our own routing service, which runs on our own hardware in New Zealand. They are used to compute the route and are not stored against you. We record only that a route was requested and roughly how long it was.

Who else sees it

Nobody. We do not sell data, we do not share it with advertisers, and there is no third-party analytics or tracking script on this site. The map tiles, the routing and the analytics all run on infrastructure we operate.

Traffic reaches us through Cloudflare, which handles the connection and may log requests as part of providing that service, and email is delivered by our mail provider. Those are the only third parties involved.

Your rights

Under the Privacy Act 2020 you can ask what personal information we hold about you, ask us to correct it, and ask us to delete your account and everything attached to it. Email us and we will do it.

Note that the anonymous usage information described above is not personal information and cannot be retrieved for an individual — there is no way for us to find "your" rows, which is rather the point.

Safety, plainly

BushBash is a map, not a navigation system, and not a substitute for preparation. Data comes from LINZ, DOC, NZTA and OpenStreetMap and can be out of date or wrong. Terrain, weather and river conditions change. Carry a paper map and a compass, know how to use them, and tell someone where you are going.

Contact

Skippra Ltd, NZBN 9429053798121 — [email protected]

Topographic data and imagery © Toitū Te Whenua LINZ, CC BY 4.0. Hut and track data © Department of Conservation. Road events © NZTA Waka Kotahi, CC BY 4.0. Routing from OpenStreetMap contributors, ODbL.