allterrainsociety.com is live. All Terrain Society is a riding crew. Any surface, any season. Today the site got a Where We Ride map, four spots so far, pulled from my Strava.

The privacy design flipped before the map shipped. The export was going to name spots by geocoding them, and its brief said the biggest cluster of ride starts was Shindagin Hollow. I probed the ride data first. The biggest cluster was my own neighborhood, and Shindagin was third. That geocoded name would have put my neighborhood on a public map.

So the export is allowlist only. A spot appears after I name it by hand, and there's no reverse-geocode fallback at all. A privacy check runs in CI against poisoned fixtures, since a clean production payload can't show that the filter still rejects anything.

The site went up Friday behind its own Cloudflare Tunnel. Hostname routes and published application routes are different things in the dashboard. Only the second writes ingress, and a tunnel with no ingress runs healthy while answering 503 to everything.