Privacy
Effective 14 September 2026
Shotgun is a free carpool planner at shotgunride.app, run by Itay Bachar. This page explains what happens to what you enter. The short version: no accounts, no cookies, no ads. A trip you plan or join is saved on Shotgun's server so its link keeps working, and only until a few days after the trip; nothing else you type is stored there.
What you enter
To plan a trip you enter places — where you're starting, where everyone is going and where each rider starts — along with the names you give riders, dates, times and how each person can travel. Shotgun works the plan out in your browser.
Google Maps
To find places, routes, transit times, tolls and meeting spots, your browser sends the places you enter, and points along the routes between them, to Google Maps Platform. The map on the page comes from Google too. Google handles that information under the Google Privacy Policy.
Shotgun's server
Two lookups go through Shotgun's own server instead of straight from your browser: the time zone at the destination, when it may differ from yours, and the drop-off point at the venue. For those, the server passes the destination's coordinates or Google place ID to Google and hands back the answer. It doesn't keep them.
The server also keeps a running count of how many plans are made each day and each month, so the service stays inside its free budget. The count holds nothing about you or your trip.
Trips
Planning a trip saves it on Shotgun's server as a carpool: a trip with its own link, which the crew opens to see the plan and which people you haven't added can use to add themselves. It holds the destination, the date and times, the organizer's name and the title they give it, and for each person on it — whether the organizer added them or they joined — the name entered for them, where they're leaving from, whether they can drive and how many seats they have, and how they're willing to travel. Once the trip is planned, it also holds who drives, where each person meets the car, and how anyone has voted they'd rather travel.
When the organizer's page has a plan open, it can hand each person their own travel options through Shotgun's server, so they can vote on them. The server passes them on and keeps nothing of them.
Places are kept only as Google place IDs and coordinates — never their names or addresses, which your browser looks up from Google each time. Coordinates are dropped 30 days after they were looked up, and the whole trip is deleted automatically a few days after it happens.
Anyone who has a trip's link can see it and join it, so share it the way you would share the plan. Changing a card takes a key that stays in the browser of whoever made it; the organizer's key can change the trip and every card. The server keeps only a scrambled (hashed) form of those keys.
Saving a trip runs Cloudflare Turnstile, which checks that a person rather than a script is saving it. It looks at signals from your browser to decide, sets no cookies for Shotgun, and is covered by the Cloudflare Privacy Policy.
Links you share
Trip links and ticket links carry the trip in the part of the address after the # sign. Browsers don't send that part to servers, so it doesn't reach Shotgun when a link is opened — but anyone who has the link can read everything in it, including names and places. Share a link the way you would share the plan itself.
Help & feedback
If you send a message with Help & feedback, it's emailed to Shotgun's inbox with your email address, if you give one, so there's somewhere to answer. Unless you untick it, a short note about the page goes with it: its address (never the part after the # sign), the trip's link code and how far it had got — how many people, whether it was planned, its date — plus the warnings the page was showing, errors your browser reported, the version of Shotgun, and your browser, screen size, language and time zone. The form shows you that note before you send. Sending runs the same Turnstile check as saving a trip. The email is kept only to answer you and fix what went wrong, and isn't shared.
What stays on your device
Your browser's local storage keeps your settings (gas, cab and weighting figures) and a note of when planning reopens after a daily or monthly limit. For trips you've planned or joined, it keeps the keys that let you change them. If you tick "Remember me on this device" when joining one, it also keeps your name, whether you can drive, and where you usually leave from — as a place ID and coordinates, forgotten after 30 days — to fill in the next trip. None of this is sent to Shotgun except the keys, which travel with a change you make, and clearing this site's data removes all of it.
Hosting and visit counts
Shotgun runs on Cloudflare, which receives the standard information any website does — such as your IP address and browser type — to deliver pages and keep the service secure, and may keep brief logs of requests to Shotgun's server for troubleshooting. Visits are counted with Cloudflare Web Analytics, which uses no cookies and doesn't follow you across sites. It isn't loaded on trip links, ticket links or carpool pages.
What Shotgun doesn't do
- No accounts and no sign-in.
- Shotgun itself sets no cookies.
- No advertising, and no selling or sharing of personal information.
Children
Shotgun isn't meant for children under 13 and doesn't knowingly collect their information.
Changes
If this policy changes, the date at the top changes with it.
Contact
Questions about privacy go to hello@shotgunride.app.