What this site stores
Short version: prices and treks are public data, your lists stay in your browser unless you sign in, and there are no advertising trackers. Three third parties do see your IP address when a page loads; they are named below.
Saved treks and lists. When you press the heart, the list is written to your browser's local storage on this device. It never leaves your browser unless you create an account. You can clear it any time from the Saved page or by clearing site data in your browser.
Fonts. The typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser requests them directly from Google, so Google receives your IP address, the requested font address, your browser's user agent and the address of the page you are on. Google's Fonts FAQ says these requests set no cookies and are not used to build profiles or for advertising. We plan to serve the fonts from our own domain so this request goes away; this page will change when that is done.
Currency choice. Your chosen currency and the day's exchange rates are kept in local storage so the site loads in your currency next time. When your browser has no exchange rates stored, or they are more than twelve hours old, it fetches fresh rates from open.er-api.com (normally at most once every twelve hours), which therefore sees your IP address; the request carries no other data about you. Rates will move to our own domain together with the fonts.
Accounts. There are no accounts yet. When sign-in arrives, it will use a one-time email link and store only your email and your lists, and this page will say so.
Analytics. We count visits with Umami, a cookie-free analytics tool, hosted by Umami Software in the European Union. It records the page you visit, the page you came from, your browser and device type, your country (from your IP address, which is then discarded) and a few named actions: a click on an operator's link, a copied budget, an email signup and script errors. It sets no cookies, stores nothing on your device and cannot recognise you between visits. The counts are aggregated; we never see who you are.
Operators and prices. Everything about operators on this site is taken from their public websites, with a link and a date next to each number. The “Open the operator's page” link carries a utm_source tag so the operator can see that the visit came from here; it says nothing about you. If you represent an operator and want a figure corrected, use the source link to see exactly what we read.
Hosting. The site is static files served by Cloudflare, which keeps short-lived server logs with IP addresses for security, as any host does.
Contact. A contact address for data requests is being set up and will be published here.