Privacy notice

Who is responsible

The controller of any personal data processed through this site, in the sense of the General Data Protection Regulation (GDPR), is the person who makes and runs Trail Book, reachable at the address below.

Trail Book · [email protected]

In short

You do not create an account, you are not asked for your name, your email or your location, and nothing you do here is tied back to you. There are no advertising trackers and no cookies set by Trail Book. Visits are counted, without cookies and without identifying anyone; see “Counting visits” below.

The only personal data that moves at all is your IP address, which your browser sends to the servers listed below when it fetches the site, a map tile or a weather forecast. That is a technical necessity of the web, and it is the legal basis of legitimate interest (Article 6(1)(f) GDPR) that covers it.

What is stored in your browser

Your language, your theme (light or dark), the races you save under My races and the routes you save under My routes are kept in your browser's local storage. They never leave your device and are never sent to Trail Book or anyone else.

You can clear them at any time from your browser's site-data settings. Clearing them removes your saved races; there is no copy anywhere else.

Counting visits

To see which races people actually open, the site uses Cloudflare Web Analytics, run by the same provider that hosts it (Cloudflare, Inc.). It records the page visited, the site you arrived from, and the country, device type and browser your browser reports.

It sets no cookies, stores nothing on your device and does not fingerprint your browser. That is why you see no cookie banner here: a banner is required for storing or reading information on your device, and nothing is stored or read (Article 5(3) of the ePrivacy Directive, Greek law 3471/2006).

No visitor is identified and no profile is built. The data is not used for advertising and is not sold. The legal basis is our legitimate interest in knowing which parts of the site are worth keeping (Article 6(1)(f) GDPR).

Services your browser talks to

The hosting provider that serves the site keeps standard server logs (IP address, time, page requested, browser type) for security and to keep the site running. They are not used to identify or profile visitors.

Map tiles are fetched from OpenTopoMap (a volunteer project hosted in Germany) and, if it is unavailable, from the OpenStreetMap Foundation (United Kingdom). Each request carries your IP address and is subject to their own privacy policies.

Weather panels are fetched from Open-Meteo (Switzerland) for the race's location, never for yours. The site never asks for your device's location.

Links to organisers, registration platforms and Booking.com only send anything when you click them; from that point the destination site's privacy policy applies.

If you contact us

If you write to the contact address above, your message and email address are kept only as long as needed to answer you and are then deleted. They are not shared with anyone.

There is currently no contact form on the site. If one is added, this notice will name the service that relays the messages before the form goes live.

Your rights

Under the GDPR you have the right to access, correct or erase personal data about you, to restrict or object to its processing, and to receive it in a portable form. Given how little the site processes, in practice this concerns only an email you may have sent.

To exercise these rights, write to the contact address above. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or the supervisory authority of the country where you live.

Changes to this notice

This notice is updated whenever the site starts doing something new with data: a contact form, a booking commission, an analytics tool. The date at the top shows the current version.