Your privacy on the trail

No account needed

There is no public Trailhead account. This website currently serves information pages and stores only your chosen appearance on your device, if you choose Daylight or Dusk. It sets no cookies. Favourites will stay on your device in the iOS app (when this feature launches); there are no web favourites.

Reports and suggestions

Status reports and suggestions will be anonymous, with no account required (when this feature launches). A status report includes the car park, status, any note and time. A suggestion includes the text and location you choose to send. Status report notes and suggestion text go to Alex only and are never shown publicly. Please leave personal information out of notes and suggestions. Alex reviews suggestions and writes any changes into the car park details before publication; status reports publish straight away without their notes.

Stopping spam

Rate limiting will use two separate keyed hashes: one of your IP address and one of your device ID. Each uses a salt that changes daily (when this feature launches). An hourly job will delete these fingerprints within about 24 hours. The website will create a random device ID only when you first send a status report or suggestion, and store it in this browser’s local storage (when this feature launches). The device ID is used only for rate limiting and sent only with status reports and suggestions. These fingerprints are used to limit abuse, not to build a profile of you. Hashing does not make this information exempt from data protection law.

Anonymous analytics

PostHog will count anonymous usage events in its EU region (when this feature launches). Web analytics will be cookieless, with no person profiles, no autocapture and no session replay. IP addresses will be discarded. Notes, optional emails and your location will not be sent to analytics. PostHog is not loaded on these pages today.

Error reports

Sentry will help find technical faults in its EU data region (when this feature launches). No personal data will be sent: default personal information collection and session replay will be off, and notes, emails and your location will not be attached to errors. Sentry is not loaded on these pages today.

Maps

Mapbox will load the map tiles (when this feature launches). Your browser will connect to Mapbox to request them, which involves sending network information such as your IP address. These information pages do not load Mapbox or request your location.

Optional tips

Trailhead is free, and tips unlock nothing. Web tips will go through RevenueCat and Stripe without a Trailhead account (when this feature launches). Trailhead will receive a purchase record, never your card details. In the iOS app, Apple will process tips through StoreKit, with RevenueCat recording the purchase. Payments are not available on this website yet.

An optional reply address

The correction form will offer an optional email address so Alex can follow up (when this feature launches). Only Alex will see it, and it will not be published or sent to analytics or error reporting. The proposed rule is to delete it 90 days after the submission is resolved, pending Alex’s approval.

Optional email retention: proposed 90 days after resolution: to be confirmed.

Your rights and contact

Under the UK GDPR, you can ask to access, correct or erase personal information we hold about you. Depending on the circumstances, you can also ask us to restrict its use, object to processing or request a portable copy. These rights are not absolute. Anonymous reports may be difficult to identify; tell Alex enough about the submission to help locate it, without sending unnecessary personal details.

Contact Alex about privacy or to exercise your rights using the address below. You can also raise a concern with the Information Commissioner’s Office (ICO).

Support and privacy contact address: to be confirmed.

Seller and data controller name: to be confirmed.

• Your data protection rights — ICO
• Raise a concern with the ICO