Privacy policy

You can read every page without an account. Our hosting provider (Vercel) keeps standard server logs — IP address, browser and the page requested — for security and to keep the site running. We don't use advertising cookies.

• Your email address — to send sign-in codes. It is never shown publicly or shared.
• Your public profile: display name, username, and — if you add them — a short bio, your Instagram handle, the treks you list as done and what you write about them. Your points and level are worked out from your approved pins. All of this is public at trekbaba.com/u/your-username and next to what you share. You can change or remove it on your profile page.
• A sign-in cookie, so you stay signed in. It's essential and holds no tracking data.

Photos usually carry hidden data: the exact GPS location, the time, and the phone model and serial number. Your browser reads the location and time before uploading, only to place the photo on the trail. Then our server re-saves every photo, removing all of that hidden data. The stored photo contains none of it.

What we keep is the pin's position on the trail (snapped onto the route line, not your raw GPS fix), the month it was taken, and what you wrote. Pins waiting for review are stored privately and only our reviewers can see them.

• Supabase — stores accounts, pins and photos (servers in Mumbai, India).
• Resend — delivers sign-in emails.
• Vercel — hosts the website.
• Google — only if you choose “Continue with Google” to sign in.

You can see and correct your details on your account page, delete any pin, and delete your account — which permanently removes your profile, every pin, every photo and your Journeys. For anything else (a copy of your data, a question, a complaint), write to admin@trekbaba.comand we'll reply within 30 days.

TrekBaba accounts are for people aged 18 and over.

If this policy changes in a way that matters, we'll update this page and its date.