Privacy policy
Last updated: 30 October 2026
ViaTrek is a free information website about via ferrata, hiking and outdoor activities. We collect as little data as possible, we don't sell it and we don't show targeted advertising. This page explains what data is processed, why, and how to exercise your rights (GDPR). (English translation for information; the French version prevails.)
Data controller
ViaTrek Adventures, non-professional website. Contact: ✉️ Send an email.
1. If you simply visit the site
- Audience measurement: we use GoatCounter, a cookie-free tool that counts page views anonymously (no profile, no cross-site tracking).
- “Near you”: the approximate town of your connection, provided by our host Cloudflare, is used to show nearby outings. It is neither stored nor linked to your identity.
- Anti-bot protection: the sign-in and sign-up forms use Cloudflare Turnstile, which checks that you are not a robot without advertising or tracking cookies.
- Sign-in with Google or Facebook (optional): we only use your email address to create or find your account (one address = one account). Your name and profile photo are neither displayed nor used: only the username you choose appears on the site. Nothing is ever posted to your networks.
- Local preferences: some data (cached weather, display settings) is kept only in your browser.
- Fonts and maps: displaying the site loads fonts (Google Fonts) and base maps (OpenStreetMap and tile providers); these services technically receive your IP address.
2. If you create an account (“My space”)
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (encrypted, never readable by us) | Signing you in, confirming your address, resetting your password | Performance of the service you request |
| Username | Identifying you on the site (the only publicly visible name, for example on your future reviews) | Performance of the service |
| Your logbook (routes done, wishlist) | Showing your logbook and statistics | Performance of the service |
| Public profile (30/10/2026): username, chosen emoji avatar, sign-up date (month), level, points and badges, published photos and reviews, info added to pages | Showing your participation in the community on the /membre/ page | Legitimate interest (community life), with the option to hide your profile at any time |
| Meet-ups: “18 or over” declaration (date), group outings, “I'm looking for partners” posts (chosen town and radius, position rounded to about 2 km), messages, area alert, notifications, reports | Connecting members who wish to be connected. Visible to others: your username, your dates and the town of your posts. Visible only to participants in an outing: the meeting place and time and the messages. Never your email or exact location. Messages, outings and posts are deleted 30 days after the outing date; notifications after 90 days. | Performance of the service at your request; legitimate interest in safety (reports, moderation) |
| My calendar (planned dates, notes, outing ideas) | Planning your outings and adding them to your calendar. Private : nobody else sees it, except the dates for which you tick “👥 Make me visible to other members”; only your username and those dates then appear on the page or event (never your notes). Unticked by default, can be changed at any time. | Performance of the service; consent for dates made visible |
| Date you accepted the terms, creation and sign-in dates, sign-in IP address | Account security, abuse prevention | Legitimate interest |
When signing up, you choose whether your logbook is shared with the community (your username and the routes you've done become visible to other members, never your email) or private. You can change this at any time in My space. Your profile (username, avatar, level, badges, published photos and reviews, never the email or My calendar) is public by default; you can hide it at any time in My space, and the page then only shows “private profile”. We never send newsletters without your explicit consent.
3. Contact and report forms
The information sent (name, email, message) is used only to reply to you or to correct a page. It passes through the FormSubmit service and then reaches our mailbox.
Who has access to your data?
Only the site publisher. It is hosted by technical providers acting on our behalf:
- Supabase (accounts and logbooks): servers located in the European Union.
- Cloudflare (site hosting) and FormSubmit (forms): these companies may process data in the United States, under safeguards recognised by the European Commission (Data Privacy Framework or standard contractual clauses).
Your data is never sold or rented.
Retention period
- Account and logbook: as long as the account exists. An account inactive for 3 years may be deleted after a warning email.
- Account deletion: immediate and permanent erasure of the account, username and logbook (technical backups are overwritten within a few days).
- Contact messages: 3 years maximum after the last exchange.
Your rights
You can at any time access your data, correct it, delete it, export it or object to its processing:
- directly in My space › My account: change username, download my data, delete my account ;
- or by writing to ✉️ Send an email.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
Deleting your data (Google or Facebook sign-in)
If you signed in with Google or Facebook, ViaTrek only keeps your email address and the network's technical identifier. To delete everything:
- sign in on My space, then My account › Delete my account : erasure is immediate and permanent;
- or write to ✉️ Send an email from the address linked to the account: deletion is done within 30 days at most and you receive a confirmation.
You can also remove ViaTrek's access in your Facebook account settings (Settings › Apps and websites) or Google (Security › Third-party app connections).
Cookies and local storage
ViaTrek uses no advertising or tracking cookies, which is why no consent banner is shown. When you are signed in, a session token is kept in your browser to keep you signed in: it is strictly necessary for the service and disappears when you sign out.
Minors
Creating an account is reserved for people aged 15 and over, or younger with a parent's consent.
Changes
This policy may change as the site evolves (reviews, photos, shop…). The date of the last update is shown at the top of the page; members will be notified of any significant change.