European Union (GDPR) Notice

GDPR Compliance & Data Rights

General Data Protection Regulation (EU) 2016/679 Statement • Last Updated: February 15, 2026

1. Commitment to GDPR Principles

Trail Shorts is fully committed to compliance with the General Data Protection Regulation (GDPR). We adhere strictly to the core principles of data minimization, purpose limitation, storage limitation, integrity, and confidentiality.

Privacy-by-Design Architecture: Trail Shorts processes your GPS activities (coordinates, timestamps, elevations, heart rate streams) entirely client-side inside your browser. No GPS files are uploaded to or stored on remote application servers.

2. Your 7 Fundamental Data Subject Rights

Under Chapter III of the GDPR, European Union residents possess the following rights:

1. Right of Access (Art. 15)

You have the right to request confirmation of whether your data is processed and obtain a copy.

2. Right to Rectification (Art. 16)

You have the right to correct inaccurate or incomplete personal information.

3. Right to Erasure (Art. 17)

Also known as the “Right to be Forgotten”. You can delete your activities directly from your browser at any time.

4. Right to Restriction (Art. 18)

You have the right to request the restriction of processing under specific legal grounds.

5. Right to Data Portability (Art. 20)

You can download your generated videos, images, and raw GPX tracks in standard open formats.

6. Right to Object (Art. 21)

You have the right to object at any time to the processing of personal data for direct marketing or analytics.

3. Sub-Processors & Data Transfers

We work with trusted third-party infrastructure providers that comply with standard contractual clauses (SCCs) and GDPR regulations:

  • Mapbox Inc. (USA / Global): Provides map tiles, vector graphics, and 3D terrain elevation tiles. Map tile requests include IP address data for CDN routing.
  • Google LLC (Google Analytics 4): Aggregated analytics metrics with IP masking and data retention controls set to the minimum interval.

4. Exercising Your GDPR Rights

Because your GPS data is stored exclusively in your local device storage (IndexedDB), you can execute your Right to Erasure immediately by clicking the “Delete” icon on any activity card on the Activities page or clearing your browser site data.

For formal inquiries, data subject access requests (DSAR), or contacting our Data Protection contact, please email:

Data Protection Contact: [email protected]