Privacy Policy

• Account details you give us: email address, name, password (hashed).
• Content you create on SightQuests: sights you save, visited, or add to lists.
• GPX downloads: an hourly download counter keyed to your account id, so we can limit downloads to 60 an hour. It is reset in place each hour. We keep no log of what you download.
• Password reset requests: counters that limit how often a reset link can be asked for, one for the IP address the request came from and one for the email address together with that IP address (or the email address alone, when the IP address can't be read). Each is keyed to a one-way code made from those addresses with a secret key, never the addresses themselves. We keep no log of the requests.
• Field Notes, if you sign up: your email address, where you gave your consent (the form at the bottom of the page, the box when you created your account, your account settings, or Resubscribe on the preferences page) and when, when you signed up and, if you did, when you unsubscribed, the region you picked on the preferences page, if any, and the private code behind the unsubscribe and preferences links in each email.
• When you create an account: whether you ticked the Field Notes box, kept with the account (see Field Notes below).
• An older marketing preference: whether you opted in to occasional emails, when you created your account or in your account settings, and when. We no longer use it; Field Notes keeps its own record.
• Newsletter sign-ups: counters that limit how often the sign-up form can be used, for the IP address the request came from and for the email address it names. Each is keyed to a one-way code made from that address with a secret key, never the address itself. A count of the welcome emails we send each day holds no address at all. We keep no log of the requests.
• Links in our account emails (confirming a sign-up or an email change, resetting a password): an hourly counter for the IP address that opens them, so a single connection can't try link after link. It is keyed to a one-way code made from that address with a secret key, never the address itself. We keep no log of the links.
• Page views, counted anonymously with Vercel Web Analytics. No cookies. See Analytics below.

The download, reset, sign-up and link counters are cleared out once they have gone a day without use, by a clean-up that runs as the site is used, so at quiet times one can stay longer.

Field Notes is our newsletter. You can sign up with the form at the bottom of every page, with the box when you create an account, or in your account settings.

The box at account sign-up doesn't subscribe you by itself. The email that confirms your address says that confirming also subscribes you to Field Notes, and only that confirmation puts the address on the list. So ticking the box can't subscribe anyone who doesn't open that email and confirm. If you confirm your address another way, through a password reset link for instance, you aren't subscribed: use your settings instead.

For every address on the list we keep a record of the consent: where it was given (the form, account sign-up, your settings, or Resubscribe on the preferences page) and when. Neither the box at account sign-up nor the form undoes an earlier unsubscribe. To come back, tick Field Notes in your account settings or use Resubscribe on the preferences page; that new consent replaces the record.

To unsubscribe, use the link at the bottom of any issue, or untick Field Notes in your account settings, which covers the address you sign in with now. If you've changed your account's address, the old one stays on the list until you unsubscribe from one of its issues. The preferences page, also linked from every issue, lets you pick a region or subscribe again.

Only the processors we need to run the service:

• Supabase — database and authentication.
• Vercel — hosting, delivery and page-view analytics.
• Resend — transactional and newsletter email.

Maps load their tiles straight from the providers: OpenFreeMap for the map itself, Mapterhorn for elevation on hike maps and on Explore once you pick the Topographic map style, and CARTO when a map falls back to its simpler version. Like any server your browser fetches from, they see your IP address and which site asked. We send them nothing else. The credits page names the map data and elevation sources behind our maps, with their licences, and links to Mapterhorn's full list of elevation sources.

The directions links on a quest open Google Maps or Apple Maps. They send only the coordinates of the start, and only when you click one.

We do not sell your data and we do not share it with advertisers.

We count visits with Vercel Web Analytics, which is built into the platform that hosts the site. It sets no cookies. To tell one visitor from another, Vercel makes a hash from your browser's request, and discards it after a day. So a visit today can't be linked to one tomorrow, or to your visits to other websites.

With each page view Vercel records the time, the address of the page, your country, region and city, and your browser, operating system and device type, plus the website that sent you, if one did. The address includes any filters or search words you used. Before a page view leaves your browser, we take out the private code in a shared list's link and in the links in our emails, so those codes never reach Vercel. Vercel records all this anonymously: not with your name, your account or your IP address. We only ever see totals: how many people read a page, never who.

Vercel is a US company. It may process this data in the United States, or in any other country where Vercel or its service providers process data. It is certified under the EU–US Data Privacy Framework and relies on the EU Standard Contractual Clauses for data that leaves the EEA.

We keep your account data until you delete your account. Deletion is immediate and permanent — saved sights, visited history, lists, and profile data are removed.

Field Notes is separate from accounts, so deleting your account doesn't take you off it. When you unsubscribe, we keep your address marked as unsubscribed, so the newsletter doesn't go to it again. To have it removed altogether, email contact@sightquests.com.