Privacy Policy

Welcome to TrailStacks — a platform built for hikers to plan, organize, and share their long-distance adventures. Your privacy matters to us. This policy explains what data we collect, how we use it, and how you can control it.

1. Who We Are

TrailStacks ("we," "our," or "us") is a digital platform that helps hikers plan their trips and manage gear. We operate in the United States and act as the data controller for your personal information.

If you have questions, contact us at Admin@trailstacks.com.

2. Information We Collect

Information You Provide

When you use TrailStacks, we collect:

• Account Info: Name, email, and login provider (Google or email).
• Profile Data: Display name, unit and currency preferences, optional bio.
• Gear & Stacks: Items you add, edit, or mark as owned.
• Registries: Public wishlists you create or share.
• Trails & Saved Data: Trails or routes you explore and link to your stacks.
• Support Messages: Feedback or requests you send us.

Automatically Collected

• Usage Data: Pages visited, clicks, navigation paths.
• Device Data: Browser type, OS, and device type.
• Log Data: IP address, timestamps, and error logs.
• Cookies: Used for sign-in sessions and remembering preferences only.

We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies or track users across sites. We never sell your data or use invasive ad tracking.

Third-Party Integrations

When you log in with Google, we only receive your basic account details needed for authentication. We do not access contacts, files, or other data from those services.

3. How We Use Your Data

We use your data to:

1. Operate and personalize your account experience.
2. Improve performance and fix technical issues.
3. Communicate important updates or respond to questions.
4. Detect and prevent unauthorized activity.
5. Comply with legal requirements when necessary.

We do not sell, rent, or trade your personal information.

4. Sharing & Disclosure

We may share limited data with trusted service providers:

• Clerk for authentication
• Neon for database hosting
• Vercel for deployment and infrastructure
• Resend for transactional emails
• Plausible for privacy-focused analytics

If you create a public Hiker Registry, the information you include (gear names, notes, etc.) will be visible to anyone with the share link. You can revoke or regenerate that link anytime in your profile settings.

We may also disclose data when legally required (e.g., court order or subpoena).

5. Data Retention & Deletion

• Your data remains stored as long as your account is active.
• You can delete your account anytime under Profile → Settings → Delete Account.
• Once deleted, all related data (gear, stacks, registries, preferences) is permanently removed from production systems.
• Database backups are kept securely for up to 30 days before full deletion.

6. Security

TrailStacks uses modern security practices to protect your data:

• TLS 1.2+ encryption for all traffic
• Data encrypted at rest in Neon Postgres
• OAuth-based authentication with Clerk
• Rate-limiting and session management for sensitive routes
• Continuous vulnerability and dependency scanning

While no system can be 100% secure, we take every reasonable step to safeguard your information.

7. Your Privacy Rights

Depending on your region (e.g., U.S., E.U., U.K.), you may:

• Access a copy of your personal data
• Update or correct inaccurate details
• Request deletion ("Right to be Forgotten")
• Withdraw consent for optional emails
• Request export of your data (coming Post-MVP)

To exercise these rights, email Admin@trailstacks.com.

8. Cookies & Analytics

TrailStacks uses cookies only for:

• Keeping you signed in
• Remembering preferences (units, currency, theme)

You can block or clear cookies through your browser settings.

For analytics, we use Plausible Analytics, a privacy-focused service that does not use cookies and does not track you across sites. Plausible collects aggregate usage data (page views, referral sources, browser type, and country) to help us improve the app. No individually identifying information is stored by Plausible in this process.

9. International Data Transfers

TrailStacks is hosted primarily in the United States. If you use the app from outside the U.S., your data may be transferred and processed there under equivalent security safeguards.

10. Children's Privacy

TrailStacks is not directed toward children under 16 years old. We do not knowingly collect personal information from minors. If a child's data is discovered, it will be promptly deleted.

11. Policy Updates

We may update this Privacy Policy from time to time. If significant changes are made, we'll notify you by email or in-app message. The "Effective Date" above always reflects the current version.

12. Contact Us

TrailStacks Privacy Team

Admin@trailstacks.com

www.trailstacks.com