Real-time location sharing, built on consent
LiveTrack is an original platform for sharing live location with full transparency — explicit consent, complete audit trails, and the right to stop and erase at any moment.
No credit card · Runs on Cloudflare free tier · Open map data
Active sessions
128
Online users
342
Avg. latency
180 ms
Features
Everything you need to share location responsibly
A complete platform — from the consent screen to the admin command center.
Consent-first sharing
Nothing is transmitted until a user grants browser permission and accepts an explicit consent screen.
Live maps on OpenStreetMap
Real-time markers with accuracy radius, route history and session playback — no proprietary map lock-in.
Realtime command center
Durable-Object-powered WebSockets stream positions to an admin live map with sub-second latency.
Role-based access
Super Admin, Admin, Operator and Viewer roles with granular permissions enforced end to end.
Full audit trail
Every login, consent, session and admin view is recorded in an append-only audit log.
Session lifecycle
Start, stop, auto-timeout and admin termination — with device, browser and IP context on every session.
Security
Hardened from the edge inward
Defense-in-depth across authentication, transport and data access.
- JWT sessions with server-side revocation
- PBKDF2 password hashing (Web Crypto)
- CSRF, XSS & strict Content-Security-Policy
- Distributed rate limiting at the edge
Compliance
Privacy is the default, not a setting
Designed around the GDPR and KVKK principles of consent, minimization and user control.
Lawful basis by design
Consent is captured with a timestamp and stored against each session. No legitimate-interest loopholes.
Right of access
Users export every byte of their personal data — profile, sessions, points and audit trail — as JSON.
Right to erasure
One action permanently deletes the account and cascades to all location history and sessions.
FAQ
Questions, answered
Can someone be tracked without knowing?
No. Sharing requires both an OS/browser permission prompt and an explicit in-app consent step. There is no silent or background tracking, and sessions stop the instant a user presses Stop.
Where is location data stored?
In Cloudflare D1 at the edge. Coordinates are only written while a session is active, and they are deleted when the user deletes their account.
Is it really GDPR / KVKK compliant?
The architecture is built around consent, data minimization, full auditability, data export and erasure. You remain the data controller and configure retention to your policy.
Does it run on free infrastructure?
Yes. It deploys to Cloudflare's free tier — Workers, D1 and Durable Objects — and uses OpenStreetMap tiles, so there are no map licensing fees.
Ready to deploy consent-first location sharing?
Create an account, grant consent only when you choose to share, and stop transmission at any moment.