What this site stores
Short version: prices and treks are public data, your lists stay in your browser unless you sign in, and there are no advertising trackers. Two third parties do see your IP address when a page loads; they are named below.
Saved treks and lists. When you press the heart, the list is written to your browser's local storage on this device. It never leaves your browser unless you create an account. You can clear it any time from the Saved page or by clearing site data in your browser.
Fonts. The typefaces are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Your browser requests them directly from Google, so Google receives your IP address, the requested font address, your browser's user agent and the address of the page you are on. Google's Fonts FAQ says these requests set no cookies and are not used to build profiles or for advertising. We plan to serve the fonts from our own domain so this request goes away; this page will change when that is done.
Currency choice. Your chosen currency and the day's exchange rates are kept in local storage so the site loads in your currency next time. When your browser has no exchange rates stored, or they are more than twelve hours old, it fetches fresh rates from open.er-api.com (normally at most once every twelve hours), which therefore sees your IP address; the request carries no other data about you. Rates will move to our own domain together with the fonts.
Accounts. There are no accounts yet. When sign-in arrives, it will use a one-time email link and store only your email and your lists, and this page will say so.
Analytics. None at the moment. If aggregated, cookie-free analytics are added, this page will name the tool.
Operators and prices. Everything about operators on this site is taken from their public websites, with a link and a date next to each number. The “Open the operator's page” link carries a utm_source tag so the operator can see that the visit came from here; it says nothing about you. If you represent an operator and want a figure corrected, use the source link to see exactly what we read.
Hosting. The site is static files served by Cloudflare, which keeps short-lived server logs with IP addresses for security, as any host does. No analytics script runs on the pages.
Contact. A contact address will be published here when the site moves to its own domain; until then, Trekoro is a project in development.