Privacy policy

• Trailhuts, operated by Jurgen de Vries, a sole proprietorship (eenmanszaak) registered in the Netherlands
• Email: hello@trailhuts.com

• Account: your email address and, if you choose, a name, nationality and preferred units. Needed to log you in and show you your own trails and itineraries. Legal basis: performing our agreement with you.
• Your planning: trails you save, accommodations you save, itineraries and overnight stops, trails you mark as finished, feedback you send. Legal basis: performing our agreement.
• Hosts: the accommodation you claim, the details and photos you add, and the email exchanged about the claim. Legal basis: performing our agreement and our legitimate interest in keeping the database accurate.
• Trailnotes: your email address, when you subscribe. Legal basis: consent; withdraw it with the unsubscribe link in any edition.
• Usage analytics: which pages are visited, which trails and filters are used, device type and approximate country, through PostHog. We do not use it for advertising. Legal basis: our legitimate interest in understanding what helps hikers. You can object (see section 6).
• Technical logs: IP address, browser and timestamps in server logs, kept briefly for security and debugging. Legal basis: legitimate interest.

We use functional cookies to keep you logged in (Supabase authentication) and local storage for small preferences such as your unit system. PostHog stores an identifier in local storage and a cookie to recognise return visits. We do not use advertising cookies and do not sell data.

We use a small number of services, each bound by a data-processing agreement:

• Supabase (database and authentication), hosted in the European Union.
• Vercel (website hosting and serving), with our server functions in the EU (Dublin) and a global edge network.
• Resend (sending account emails and Trailnotes).
• PostHog (usage analytics).
• Cloudflare R2 (storing images).
• Buy Me a Coffee (the optional support button; loading it shares your IP address with them).
• Mapbox (map tiles; your browser requests tiles from Mapbox, which sees your IP address).

Where a provider processes data outside the EU, this happens under the EU Standard Contractual Clauses or an adequacy decision. We never share your personal data with accommodations unless you send them a request yourself, and we never sell it.

• Account and planning data: as long as your account exists. Delete your account and it is removed within 30 days, apart from what we must keep for tax or legal reasons.
• Trailnotes: until you unsubscribe; then your address is kept only on a suppression list so we do not email you again.
• Analytics: aggregated after 12 months.
• Server logs: up to 30 days.

You can ask to see, correct, export or delete your personal data, restrict or object to processing based on legitimate interest (including analytics), and withdraw consent at any time. Write to hello@trailhuts.com; we answer within a month. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Trailhuts is not aimed at children under 16, and we do not knowingly collect their data.

When this policy changes, the date at the top changes with it; for significant changes we tell account holders by email.