Privacy Policy

Who controls your data

Digitis SRL (Rue Au Palo 26, 4053 Embourg, Belgium, BCE 0764.802.042) is the data controller for Hiking3000.com. Contact: webmaster@hiking3000.com.

What we collect

• Account data: email, first name, last name, hiking level, optional bio and avatar. Required to create an account and publish field reports.
• Activity data: completed hikes, wishlist, comments, field reports. You control what is public and what stays private from your profile settings.
• Technical data: standard server logs (IP, user agent, timestamps) kept up to 30 days for security.

Why we process it

• Operate your account and authenticate you (magic link)
• Let you publish field reports and comments
• Prevent abuse and moderate content
• Contact you for important site updates (account-related only)

We do not sell your data. We do not use it for advertising. We do not feed it to third-party ad networks.

Where your data is stored

Your data is stored in the European Union:

• Supabase (Postgres, auth): EU region, acts as data processor
• Scaleway (photo storage, email sending): Paris and Amsterdam datacenters
• Hetzner (hosting): Nuremberg and Helsinki datacenters

No data is transferred outside the EU without adequate safeguards.

Your rights (GDPR)

Under GDPR, you have the right to access, rectify, delete, restrict, object to processing, and port your data. You can exercise most of these rights directly from your profile settings:

• Access and portability: export your data as JSON from your profile
• Rectification: edit your profile at any time
• Deletion: close your account (full deletion or anonymisation of field reports), 7-day grace period
• Privacy: toggle each profile field (pseudonym, avatar, level, role, completed hikes) public or private

For any other request, write to webmaster@hiking3000.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority (autoriteprotectiondonnees.be).

Retention

Account data is kept as long as your account is active. After account closure, data is deleted within 7 days (grace period), except for field reports you chose to anonymise (kept as "Anonymous hiker").

No cookies, no Google Analytics

Hiking3000 does not use any advertising cookies, any third-party tracking cookies, and no Google Analytics. This is a deliberate editorial choice.

Visit traffic is measured with self-hosted Plausible Analytics on our own servers (analytics.digitis.cloud), an open-source tool that aggregates anonymous page counts without identifying individual visitors, without cookies, without persistent browser fingerprinting. Data never leaves our European servers (Hetzner, Germany).

The only cookies and local storage you may encounter on the site:

• Session cookies (sb-access-token, sb-refresh-token): only if you create an account and log in. Used to keep you logged in between page loads.
• localStorage for site-wide banner dismissal preferences. Stored in your browser, never sent to our servers.

No consent banner to dismiss on every visit because we don't deploy anything that would require it.

Third-party widgets embedded in articles (Garmin, Meteoblue, YouTube via youtube-nocookie, OpenStreetMap) may set their own cookies. Use a content blocker to prevent them.

Full legal text

Full privacy policy (legally binding): Politique de confidentialité (French).