Privacy policy

Information you give us

• Account details: your name, username, email address and password. Passwords are stored only as a salted hash — we never see or store the password itself. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Profile: anything you add, such as a bio, location, profile photo and whether your profile is private.
• Your activity: hikes you log (date, time, notes, trail conditions), trails you save, ratings, reviews, comments, photos, who you follow, reports you submit and trails you suggest.

Information collected automatically

• Sign-in sessions: when you log in we store your IP address and browser type with your session, so you stay signed in and we can spot suspicious sign-ins.
• Diagnostics: when a page errors or is slow, we record the page address, the error and how long it took, so we can fix problems. These records are deleted after 30 days.

We don't use advertising or analytics trackers. Photos are resized in your browser before upload, which removes embedded location data (EXIF) from the file.

• To run Hiked-It: show your logbook, reviews and photos, build your feed and send you notifications.
• To keep accounts secure and the community safe: verifying emails, resetting passwords, limiting spam and abuse, and reviewing reported content.
• To send account emails, such as email verification, password resets and replies to your trail suggestions. We don't send marketing email.
• To find and fix bugs and keep the site fast.

• Public by default: your name, username, profile photo, bio, location, reviews, comments, public hikes and their photos, and your followers and following counts.
• Private hikes: a hike marked private, and its photos, are visible only to you.
• Private profile: only people you approve as followers can see your logbook and hikes. Your name, username, photo and reviews are still visible.
• Only you: your email address, password, want-to-hike list and sign-in details are never shown to other users.

Site administrators can see account information when needed to run the service and handle reports.

We share information only with the services that make Hiked-It work, and only what they need:

• Cloudflare hosts the site, its database and photos, sends our emails, and provides Turnstile, which checks sign-ups for bots.
• Google, if you choose to sign in with Google. Our pages also load fonts from Google Fonts, which receives your IP address when fonts download.
• MapTiler serves map images. Your browser requests map tiles from MapTiler, which receives your IP address and the map area you are viewing.

We may also disclose information if required by law, or to protect the safety of our users or the public. We will never sell your personal information.

We use only the cookies needed to keep you signed in and to protect your session. There are no advertising or tracking cookies. If you install Hiked-It on your phone's home screen, it works the same way.

• Edit your profile at any time in Settings, and edit or delete any hike, review, comment or photo.
• Go private: make your profile private, or mark individual hikes private.
• Delete your account from Settings. This permanently removes your profile, hikes, reviews, comments, photos and follows. Copies may remain in encrypted database backups for up to 30 days before they're overwritten.
• Ask us for a copy of your information, or to correct or delete it, by emailing privacy@hiked-it.com.

Hiked-It isn't intended for children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, email us and we'll delete it.

If we make significant changes, we'll update the date above and let you know on the site or by email.

Questions about your privacy? Email privacy@hiked-it.com.