Privacy and GPX Files: What to Strip Before Sharing

GPX is a plain-text XML format, which means anyone who opens your shared file can read everything in it. Before posting a track to a forum, a blog, or social media, it's worth knowing what's in there.

What a GPX file can contain

• Every track point — typically one per second, with lat, lng, elevation, and timestamp.
• Your home address — implicit in the first and last track points of any ride or run starting from home.
• Your routine — repeated tracks show your commute, your gym, your kids' school.
• Device metadata — the recording device name and software in the `<creator>` attribute.
• Heart rate, cadence, power — in extensions like `<gpxtpx:TrackPointExtension>`.

The minimum clean-up before sharing

1. Trim the start and end to cut your home address. Use the GPX Editor trim sliders — 0.5 km off each end is usually enough.
2. Remove the creator tag if you don't want the device fingerprint published.
3. Strip extensions if you don't want heart rate data attached.

Strava-style privacy zones

Strava has built-in privacy zones that hide the start/end of tracks within a radius of a chosen address. If you frequently share tracks publicly, set those up — they apply automatically to every upload.

When in doubt, screenshot

If you're sharing for storytelling (a blog, a forum post), a screenshot of the route on a map is often better than the GPX itself. You get the visual without leaking the data.

Related guides

• How to remove EXIF data before sharing
• Trim a GPX track
• Edit a GPX file in your browser