What thetrail keeps, and how to have it deleted.

Who holds your data

What we keep

• We keep your name and email address. We use them to send your sign-in code and to keep your progress, and we receive them in an email the first time you sign up. Our lawful basis is the contract between us, because we cannot give you the service you chose without them. We keep them until you ask us to delete everything we hold about you.
• We keep your walk, against your email address. It holds:
  • the trail you are walking;
  • the stop you have reached;
  • the day of your stay and the page you are reading;
  • the distance you have walked;
  • your progress in each conversation at that stop;
  • your answers at the trailhead about who is walking and how much of the language you know;
  • the people who walk with you, if anyone does: only how many there are, each one's relationship to you, and whether each is a woman or a man;
  • your reason for walking;
  • the day your walk sets out, where the trailhead asks you to choose one;
  • each answer you give in a phrasebook quiz on a word or a place, with its day;
  • each answer you give in a grammar quiz on the road, point by point, with its day;
  • your score in each phrasebook quiz, and the questions you missed, which the next quiz asks again;
  • the number of times a phrasebook quiz has ended with each kind of praise, and each count of words known that a quiz's end has announced;
  • the encounters you have unlocked;
  • your settings for the pace of the recordings and for the flags;
  • your settings for the phrasebook quiz and for the English of a reply;
  • a random name for the browser tab your walk is open in, and a count of that tab's saves, so that an older save never replaces a newer one;
  • the time you started and the time we last saved the walk.
  Our lawful basis is the contract between us, because the walk is the service you chose. We keep it until you ask us to delete everything we hold about you.
• We keep your flags. Each one holds the line or the picture you flagged, the problem you chose, any comment you wrote, and your account, if you had signed in when you sent it. Our lawful basis is our legitimate interest in correcting the walk. We keep a flag you sent while signed in until you ask us to delete everything we hold about you. We keep a flag sent without signing in, which names no account. The hash of your network address on any flag goes a day after we take the flag up, or 90 days after you sent the flag if that comes first.
• We keep which trails your account may walk. Some trails open only once your account has access, and we keep a record for each of them:
  • the trail;
  • the date you asked for access, if you asked;
  • whether we gave access or refused it, and whether we later withdrew it;
  • the source of your access: your request, our own choice, a purchase, or a gift;
  • the date of our decision and the person who made it.
  Our lawful basis is the contract between us, because each record decides whether a trail is open to you. We keep them until you ask us to delete everything we hold about you.
• We keep your request for a trail until we decide it. The request holds a link to your public profile and any note you wrote, and we delete both when we decide. An email tells us of each request: who asked, and for which trail. Our lawful basis is the contract between us, because you asked us for that trail.
• We keep a hash of your network address. The hash is one-way, and we never keep the address itself. We use it only to cap how many requests one address can make. Our lawful basis is our legitimate interest in keeping the site safe from abuse. We delete each hash by the time we delete the record that holds it. A request for a new code, or a code typed with an address that has no account, keeps only the hash, and we delete it after a day.
• We keep the age group you told us you are in, and the day you told us. There are two groups:
  • thirteen to fifteen
  • sixteen or older
  We never keep your age or your date of birth, and we keep nothing of your answer about your country. We use your age group only to decide which parts of thetrail are open to you, and while you are thirteen to fifteen we ask again once a year. If your answer means you cannot keep an account, we close your account and delete nothing. We keep the account and everything in it, with the day we closed it and the reason, and it opens nothing until we reopen it. Our lawful basis is our legitimate interest in opening each part of thetrail only at the ages the law allows. A new answer replaces the one before it, and we keep your age group until you ask us to delete everything we hold about you.
• We keep the emails about you that reach our mailbox. They are:
  • the notice of your sign-up, which holds your name and your email address;
  • the notice of each request for a trail, which holds your name and your email address with the trail;
  • each email you send to support@thetrail.online or in reply to your code, with our replies.
  Our lawful basis is our legitimate interest in knowing who walks and in answering you. We keep them until you ask us to delete everything we hold about you, and then we delete them too, your request among them.

Children and young people

A full record

News by email

Tracking and analytics

Other services

In your browser

Deleting everything

Where to complain