Privacy Policy

1. Scope

This Privacy Policy explains how Oleksandr Shevchenko processes information through the Histrail mobile applications, public website, API, support, and account-deletion request process.

2. Information Histrail processes

Histrail processes information only when it is needed to provide the product or an optional feature.

• Account information: email address, display name, language, sign-in provider, provider subject, password hash for email accounts, account timestamps, and an optional marketing-email preference with consent history.
• Travel record: visited places, visit date, optional note, visit status, saved places, collection progress derived from visits, and public collection-share links that you create.
• Photos: optional visit image and thumbnail, upload timestamp, and—when present—capture date and latitude/longitude extracted from EXIF as supporting metadata.
• Location: optional foreground device location used to show nearby places. Client coordinates sent with a visit are untrusted supporting metadata and are never required for an old or manually entered trip.
• Subscriptions: store, product, transaction or purchase reference, status, expiry, auto-renewal state, protected installation identifier and hashed installation credential, and account linkage when applicable. Histrail does not receive full payment-card details.
• Technical operations: ordinary server/security logs and aggregate product events. Current aggregate analytics explicitly strips user ID, email, and installation ID.
• Support and deletion requests: account email, permanent-deletion confirmation, optional reason/note, locale, timestamp, source page, and request reference ID.

3. Why information is used

Information is used to authenticate accounts, synchronize visits and saves, calculate progress, store optional photos, deliver Premium access, create user-requested public achievement links, send account-service messages, provide support, process deletion requests, secure the service, and maintain reliability. Promotional email is sent only after an explicit opt-in and can be stopped at any time.

4. Permissions and choices

Foreground location, camera/library access, photo upload, public sharing, and promotional email are optional. The marketing checkbox is off by default during registration; the preference can be changed in Profile or through the unsubscribe link in every promotional message. Histrail remains usable for catalog browsing without authentication and without foreground location. Device permissions can be changed in operating-system settings.

5. Service providers and disclosures

Histrail uses Hetzner for production hosting, database, and object-storage infrastructure. Histrail may also use Apple and Google for sign-in and store billing, Google Maps for map functionality, and Resend for transactional email, inbound support routing, consent-based marketing lists, automations, delivery events, and suppression handling. Inbound Histrail mail may be forwarded to an access-controlled Google mailbox used by the operator. These providers receive only the information needed for their role and process it under their own terms and privacy notices. Histrail does not add advertising trackers to this website and does not sell personal information.

6. Website privacy

The website has no advertising pixels, behavioral analytics, fingerprinting, chat widget, cookies, or browser-storage identifiers. A deletion request is sent directly to the Histrail API and is not placed in a URL.

7. Storage and international processing

Account and travel data are stored in PostgreSQL/PostGIS, and visit images are stored through Histrail’s configured object-storage service. Service providers may process information in countries other than the one where you live. Provider locations, terms, and transfer arrangements depend on the services enabled for production.

8. Retention

Account-linked product data is retained while the account is active and removed through the deletion process, subject to limited records that must be kept for security, fraud prevention, store reconciliation, legal obligations, or resolving a request. Logs, backups, support records, transaction references, installation-security records, and processor copies are retained only for as long as reasonably necessary for those purposes, then deleted or de-identified where applicable.

9. Account deletion

Authenticated users can delete directly in the app at Profile → Delete account. People without the app can initiate a verified manual request at the public Delete account page. Deletion removes the profile, marketing preference and consent history, the matching Resend marketing contact, refresh tokens, visits and notes, visit-photo objects and metadata, saved places, and public share links. The subscription record is detached rather than used to recreate the deleted profile. Store subscription cancellation is a separate action managed by Apple or Google.

10. Security

Histrail uses access controls, hashed credentials, transport protections, server-side validation, limited logging, and storage-first image deletion in the current implementation. No security certification is claimed.

11. Privacy choices and rights

You can withhold optional permissions, opt in to or out of promotional email, remove saved places, revoke public share links where supported, manage store subscriptions, and delete the account. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, objection, or portability, and to complain to a supervisory authority. Histrail may verify your identity before acting on a request. Privacy questions and requests may be sent to support@histrail.app.

12. Children

Histrail is not directed to children who cannot lawfully consent to use of the service in their country without authorization from a parent or guardian. If you believe a child has provided personal information without the required authorization, contact Histrail so the information can be reviewed and removed where appropriate.

13. Changes and contact

Histrail may update this Policy as the service or applicable requirements change. The current date appears at the top of this page. Material changes will be communicated through the service or another appropriate channel. Privacy questions and requests may be sent to support@histrail.app.