Privacy Policy
Learn how we collect, use, and protect your data.
We respect your privacy and are committed to protecting your personal information.
Information We Collect
- Contact form data: name, email, phone, message, and optional tour inquiry details.
- Account data: name, email, phone, password (stored as a hash), profile image, and profile/social links.
- Community content: reviews, comments, and blog posts you submit.
- Newsletter subscriptions: email, optional name, confirmation and unsubscribe token hashes, status, IP address, and user agent.
- Strava OAuth data (if you sign in with Strava): Strava ID, profile image, and access/refresh tokens with expiry.
- Security/technical data: IP address, user agent, login/security logs, and anti-abuse metadata.
- Quiz data: quiz attempts, scores, and share token for result-sharing links.
- Uploads: images you upload (profile, blog cover, galleries, and other user/admin content media).
Cookies and Similar Technologies
- Session/authentication cookies required for login and secure site operation.
- Blog unique-visit cookie (
ccn_vid) used for counting unique blog views. - Trusted device cookie used to remember 2FA-trusted devices for a limited period.
How We Use Information
- To operate the site, respond to inquiries, and provide requested services.
- To manage accounts, reviews, comments, blog submissions, and other user-submitted content.
- To send transactional emails (verification, password reset, contact replies, and security notices).
- To deliver newsletters and updates you subscribe to (for example tours/events).
- To improve security, prevent abuse, and maintain service reliability.
Third-Party Services
- Google reCAPTCHA (bot protection and abuse prevention).
- Strava (OAuth login and related API data).
- Email delivery via SMTP.
- OpenStreetMap tile services (for map display features).
Data Retention
We keep data only as long as needed for the purposes described above, or as required by law. You may request deletion of your personal data where applicable.
Your Rights
You may request access, correction, or deletion of your personal data, subject to applicable law.
Contact
If you have questions about this policy, please contact us at the email shown on the website.