Privacy
Tråkk is made to show which trails are used, without showing who walks where.
What is stored on your phone
Your GPS tracks are only stored on your phone. The start and end of each hike and areas you have added as privacy zones are removed before the track is stored. The tracks are never sent to us.
What we store
- Account: your email address and your sharing choices.
- Sign-in: sign-in sessions (only a hash of the key), with times and device names.
- Contributions: which trail segments you walked, per day, and how many times. No times of day, no GPS points. Sharing is on for new accounts; you can turn it off at any time under Account or in the app, and nothing more is sent.
- Username: shown with route suggestions that have been approved. It can be changed once every 30 days; an old name is kept for you for 90 days.
- Route suggestions: when you suggest a route, the part of the track you chose is sent, without times of day and without anything from your private zones, along with name, description and month. Others see it only once it is approved, and you can withdraw it. Parts of an approved route can become new trails on the map (Tråkk trails); they remain if the suggestion or the account is deleted. If an admin rejects and blocks a route, it is kept so it cannot be submitted again, even if you withdraw the suggestion, until the account is deleted.
- New trails: if you turn on “Contribute new trails”, you can send stretches from your own trips that do not follow known trails, cleaned like route suggestions. A single stretch is never shown to anyone, not even to us. Only when at least 5 people have walked roughly the same are the stretches merged into one proposed trail. The stretches are deleted once it has been reviewed, or after 90 days.
- Feedback: what you write, with app version, Android version and phone model, so we can find bugs. We only reply by email if you asked us to. Feedback is deleted with the account.
- Captcha: when you ask for a sign-in code, Cloudflare Turnstile checks that you are not a robot. Cloudflare then sees your IP address and browser, but we store none of it.
- Rate limiting: a cryptographic hash of your IP address when you sign in, deleted after at most a day.
What others can see
New accounts are pioneers: your contributions can be shown on the heatmap right away, even before others have walked the trail. Nobody can see who the contributions come from, but if you are alone on a trail, others can see that someone has walked there. If you instead choose "when at least 5 have walked the trail", use of a trail is only shown once at least 5 different users have walked it in the period.
Your rights
Under Account you can turn off sharing, download all your data and delete your account. Deleting removes the account and all your contributions for good.
Where the data is stored
The data is stored on a server in the EU and is not shared with anyone. Traffic to the website and the app goes through Cloudflare, which protects the service against attacks. We use no tracking or analytics tools.