Privacy Policy
Effective Date: February 15, 2026 • Last Reviewed: February 15, 2026
1. Executive Summary & Privacy Principles
Welcome to Trail Shorts (“we”, “our”, or “us”). We believe your athletic and geographic data belongs to you. Our platform operates on a privacy-first, client-side processing model.
- We do not sell or monetize your personal data.
- GPX tracks and workout streams are parsed and rendered locally in your browser.
- No raw GPS files are uploaded or stored on our servers.
- Saved activities reside strictly in your browser's local IndexedDB cache.
2. Information We Collect and Process
2.1 GPX Files & Activity Streams
When you upload a .gpx file, the file is read and parsed directly by your device's WebAssembly / JavaScript runtime. GPS coordinates, elevation, timestamps, heart rate, and cadence streams remain entirely inside your local browser memory.
2.2 Web Analytics & Aggregated Metrics
We use Google Analytics (GA4) to measure site traffic, device screen resolutions, browser versions, and feature usage. This helps us ensure compatibility across all devices and optimize 3D map rendering performance.
2.3 Local Storage & Cookies
We use browser storage (LocalStorage, SessionStorage, IndexedDB) to save your custom themes, aspect ratio settings, and offline activity list. See our dedicated Cookie Policy for detailed specifics.
3. Third-Party Integrations
To provide high-definition 3D terrain and map rendering, the Service connects with:
- Mapbox GL JS: Streams satellite imagery, street map tiles, and terrain elevation DEMs directly to your WebGL canvas.
- Google Analytics: Processes aggregated usage statistics with IP masking enabled.
4. California Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:
- Know what personal information is collected and whether it is sold or shared.
- Opt-out of the sale or sharing of personal information (Trail Shorts does not sell any user data).
- Request the deletion of their personal information.
- Non-discrimination for the exercise of their privacy rights.
5. European Privacy Rights (GDPR)
If you are an EU or UK resident, you enjoy comprehensive data rights including the Right to Access, Rectification, Erasure, Data Portability, and Objection. Please consult our complete GDPR Statement for details on how to exercise these rights.
6. Data Security
We enforce strict transport layer security (HTTPS with TLS 1.3) across all endpoints. Because activity files are not sent to our servers, there is no centralized database of user GPS tracks that could be compromised.
7. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect new features or legal requirements. When updates are published, the revised policy will be posted on this page with an updated “Effective Date”.
8. Contact Us
If you have any questions or concerns regarding our Privacy Policy or data handling practices, please contact our Privacy Team: