RightsTech Ltd (company number 16602847) runs Trailpost and is the controller of the personal data described here. UK GDPR and PECR apply, and EU GDPR applies if you are in the EU. Email hello@trailpost.live with any question about this notice.
What we collect and why
If you hold an account: your email and name to run the account; the routes, legs, posts and photos you add; and your location pings while a trail is live. We use these to show your progress to the people you share the link with and to send the daily message. The legal basis is the contract with you. Location pings with a time are sensitive in combination, so we treat them as high-risk data: we keep them only for the trail, show them only at the precision you chose, and never share the underlying coordinates.
If you follow a trail: your email or phone number if you ask for a daily message, used only for that message and for nothing else. The legal basis is your request. Opening a follower page does not require an account and we do not identify you.
Photos
We remove location and other metadata from photos before storing them. If you opt in, we keep the photo's location separately so it can be placed on your route.
Who else sees your data
Processors who host and deliver the service: Supabase (database, storage and authentication, EU region), Vercel (hosting), an email provider for the daily message, a map tile provider, and a WhatsApp provider for Plus messages. Each is under a data processing agreement. We do not sell data.
How long we keep it
A follower page stays live for 12 months after the trail finishes on Free, then becomes visible only to the owner; on Plus it stays live until you delete it. Pings are deleted when a trail is deleted. Follower emails are deleted when you unsubscribe or the trail is deleted. Account data is deleted within 30 days of you deleting your account. Logs are kept for 30 days.
Your rights
You can export or delete everything from your account settings without emailing anyone. You also have the rights to access, correct, restrict and object under UK and EU GDPR, and to complain to the ICO (ico.org.uk) or your local authority. Email us first and we will usually sort it out.
Age
Trailpost is for people aged 16 and over.