Privacy statement
HikerPilot collects as little about you as possible. You don't need an account. We use no tracking cookies, no advertising and no social media buttons. Everything on hikerpilot.com loads from our own servers. We count visits with our own statistics tool, which uses no cookies and stores no IP addresses.
1. Who we are
HikerPilot is a project run by C. Malmberg in the Netherlands. We are the controller for the personal data described here. For questions about privacy, please use our contact page.
2. What we process and why
| Data | Purpose | Legal basis | How long |
|---|---|---|---|
| Server logs: date and time, the page requested, referring page, browser type. No IP address | Keeping the site secure and running, finding errors | Legitimate interest (Art. 6(1)(f) GDPR) | A limited time: older entries are overwritten automatically |
| Visit statistics: the page visited, referring site, browser, operating system, device type, screen size, language, country and region | Seeing which pages and trails people use, so we can improve the site | Legitimate interest (Art. 6(1)(f) GDPR) | As long as useful. They can't be traced back to you |
We don't sell your data, share it for marketing, or use it to profile you.
3. Visit statistics (Umami)
We count visits with Umami, an open-source statistics tool that runs on our own server, at stats.hikerpilot.com. No data goes to Google or any other analytics company.
Umami sets no cookies and stores nothing on your device. It does not store your IP address. It uses the address only briefly, to work out your country and region and to recognise visits from the same browser within one month. To do that it creates a code, scrambled (hashed) with a key that changes every month. After that month, nobody, including us, can link the statistics to a person. If your browser sends a Do Not Track signal, we don't count your visit at all.
4. Cookies and local storage
Ordinary visitors get no cookies and nothing in local storage. We only set two strictly necessary cookies when you use a form or log in:
| Cookie | Purpose | Expires |
|---|---|---|
| csrftoken | Protects forms against misuse from other websites | 1 year |
| sessionid | Keeps you logged in (editors only) | 2 weeks, or when you log out |
These cookies are needed for the site to work, so they don't need your consent. Switching language doesn't use a cookie: the language is part of the web address (for example /nl/).
5. Your location on the map
The maps have a "show my location" button. When you press it, your browser asks whether you want to share your location. Your position is used only in your own browser, to show where you are on the map. It isn't sent to us or stored.
6. Who processes data for us
The site, database, statistics and files are hosted by DigitalOcean, LLC, in its Amsterdam data centre. Images and other files are delivered through DigitalOcean's content delivery network (CDN), which handles your IP address so the files reach your browser. DigitalOcean is our processor under a data processing agreement. That agreement includes the EU standard contractual clauses for the rare case that DigitalOcean staff outside the EU access data. We use no other parties.
7. Links to other websites
Our trail pages link to accommodation, restaurants, transport and other websites. Once you click through, that website's own privacy and cookie policies apply.
8. Security
The site is only available over an encrypted connection (HTTPS). Access to the servers and the database is limited to the site administrator, using key-based logins. We keep software up to date and back up the database securely, and backups are deleted after a fixed period.
9. Your rights
You can ask to see, correct or delete the personal data we hold about you. You can also object to its use, ask us to limit it, or ask for a copy. Send us a message through the contact page and we will answer within one month. We can only act on data we can link to you. The visit statistics are anonymous, so we can't find your visits in them.
If you think we handle your data wrongly, please let us know first. You also have the right to complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
10. Changes
When we change how we handle data, we update this statement. The date at the bottom shows when it last changed.