Privacy Policy

Who we are

Yomp.guide is run by Jake Iggulden, an individual based in the UK, who is the data controller for the personal data described here. “We” and “us” in this policy mean him. For anything in this document, including any request about your data, email hello@yomp.guide.

What we collect

Only what the service needs to work. In practice that is:

• The waitlist. If you join the waitlist we keep the email address you give, whether you told us you want to go on expeditions or make outdoor videos, the channel link you add if you make them, the campaign tag of the link you arrived by (see below), and when you signed up. How we use it is set out in its own section below.
• Your account. An email address; a password, which is hashed by our authentication provider, so it is never stored in a form we can read and we cannot recover it for you; and a record of when you accepted the terms.
• Your profile. A handle, and optionally a display name, a short bio and an avatar. All of this is public, by design: it is how your yomps are signed.
• What you file. Photographs, item names, brands, prices, weights, notes and any product links you add to a yomp.
• Where you went. If you upload a GPX file we store the route it describes. If your photographs carry location and time data (EXIF), we read it so the photographs can be placed on the map. We also store the place you pick when you locate a yomp. This is precise location data and we treat it as the most sensitive thing here; see the next two sections.
• Who you went with. Other members can tag you as one of the party on their yomps. That stores a link between their yomp and your profile.
• How you found us. If you arrive by a link carrying a campaign tag (for example ?from=instagram), we keep that tag against your account or waitlist entry so we know which outreach worked. It is a short label, not an identifier, and it is never shown publicly.
• Technical logs. Like any website, the companies that host us record the IP address, browser and time of requests, to keep the service running and secure.
• Aggregate usage. Page-level analytics that set no cookie and build no persistent identifier or profile of you.

The waitlist

We use a waitlist address for two things only: to tell you when Yomp.guide opens, and, if you told us you make outdoor videos, to talk to you about setting expeditions on it. Nothing else. The list is never shown publicly, shared, sold or used for advertising.

Emails come from hello@yomp.guide. Every one of them tells you how to come off the list, and replying to any of them asking to be removed works too.

Anyone can type any address into a form. If you get an email from us that you did not ask for, reply and we will delete your address.

What we deliberately do not keep

Your original GPX file is discarded. A raw track routinely records the door it started from. So the file you upload is read in your own browser and never sent to us; what reaches our servers is the route line alone, simplified to at most a thousand points. There is no column in our database that could hold the original, and there never has been.

Your photographs’ hidden details are removed. Every image is redrawn in your browser before it is uploaded, which strips the location, camera and other details embedded in the file. The only location we keep for a photograph is the point on the map where it is placed, and the time it was taken.

Background removal on item photographs also runs entirely in your browser. The software is downloaded to your device from staticimgly.com and the image never leaves it for that purpose.

What is public, and what that really means

When you publish a yomp, its photographs, the points on the map where they sit and the times they were taken, its route, item list, totals, your handle and the handles of anyone you tagged become readable by anyone, including people who are not signed in, and search engines. That is the point of the service, but it is worth saying plainly: a published route shows where you went, and a published photograph shows what you look like if you are in it.

Drafts are private. Our database refuses to serve them to anyone but you, and their photographs can only be fetched through temporary links issued to you.

If someone tags you on a yomp they publish, your handle appears on it and the yomp appears on your own page. You can remove yourself from any yomp at any time from your account page, or ask us to.

Why we are allowed to hold it

• The waitlist: your consent. You asked to be told. You can withdraw it at any time by replying to any email or writing to hello@yomp.guide, and we will delete your address.
• Your account, your profile and the yomps you file, including their locations and tags: performance of a contract. You asked us to run this service for you and it cannot work otherwise.
• The campaign tag, aggregate analytics and technical logs: our legitimate interests in understanding how the service is found and used, and in keeping it secure. All three are minimal, and none is used to target you.

Who else processes it

We keep this list short on purpose. Each of these acts on our instructions, and none of them is sold your data:

• Supabase: our database, sign-in and file storage, hosted in London. Your account, your yomps and the waitlist live here.
• Vercel: hosting, the cookie-free page analytics mentioned above, and the technical logs that come with hosting.
• Resend: sends the account confirmation and password-reset emails, so it handles your email address.
• Our email provider: hosts the hello@yomp.guide mailbox, which the waitlist is emailed from and your messages to us arrive in.
• Mapbox: draws the maps and looks up place names. Your browser requests map imagery from Mapbox, which means Mapbox sees the areas you look at. Mapbox is also notified each time a live map loads; this is how they meter their own service and there is no supported way to switch it off.
• Komoot (Photon): the place search you use to locate a yomp. What you type into it is sent to Photon, an OpenStreetMap search service run by Komoot.
• IMG.LY: hosts the background-removal software your browser downloads. As above, your images are not sent to them.

Your account, your yomps and the waitlist are stored in the UK. Some of the companies above are based elsewhere: Vercel, Resend and Mapbox in the United States, Komoot and IMG.LY in Germany. Where your data leaves the UK, it goes only to countries UK law recognises as protecting it adequately (which includes the EU, and US companies certified under the UK extension to the EU–US Data Privacy Framework), or under the transfer contracts UK law approves.

How long we keep it

• A waitlist entry is deleted within three months of the email telling you Yomp.guide has opened, or sooner if you ask. If you create an account in the meantime, the account rules below apply to the account.
• Your account and its yompsare kept until you delete them or ask us to close your account. Deleting a yomp removes its row and its images. Closing your account removes your profile, your yomps, their images and any tags of you on other people’s yomps.
• Technical logs are kept by our hosting providers for a short period they set, then deleted.

Backups may take a short while longer to age out, and content you have shared elsewhere (an exported share card, a screenshot, anything already copied) is beyond our reach.

Your rights

Under UK data protection law you may ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict or stop certain uses of it, ask for the data you gave us in a form you can take elsewhere, withdraw consent you have given, and object to processing we base on legitimate interests. Email hello@yomp.guide. It is free, we will answer within one month, and you will never be treated differently for asking.

To close your account and have its contents deleted, email hello@yomp.guide and we will action it. We are building a button that does the same thing without asking us; until it exists, the email route is the one that works, and it is the one we are bound to honour.

If you think we have got this wrong, please tell us first, but you are entitled to complain to the Information Commissioner's Office (ico.org.uk) at any time.

Cookies and browser storage

We set no advertising or tracking cookies, and there is no consent banner because there is nothing to consent to. What we do keep in your browser is strictly necessary or trivial, and none of it follows you to other websites:

• a sign-in token, in local storage, without which you would be signed out on every page;
• while Yomp.guide is in its invitation-only alpha, a cookie that remembers you entered the alpha password, for up to 30 days;
• the campaign tag described above, for the length of a single browsing session.

Children

This service is not intended for children under 13, and we do not knowingly hold their data. If you believe a child has created an account or joined the waitlist, email hello@yomp.guide and we will remove it.

Changes

If we change this policy we will change the date at the top. If a change materially affects what we do with your data, we will tell account holders and the waitlist directly rather than relying on you to notice.