Privacy Policy for Giacosoft d.o.o.

Last Updated: October 20, 2026

Giacosoft d.o.o. ("we," "our," or "us") values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website trailarix.com, use our services, or interact with us.

Data Controller

The data controller responsible for your personal data is:

  • Company name: Giacosoft, razvoj programske opreme in svetovanje, d.o.o. ("Giacosoft d.o.o.")
  • Registered address: Rakuševa ulica 31, 1000 Ljubljana, Slovenia
  • Registration number: 9767908000
  • Tax ID: 29546486
  • Contact: support@giacosoft.com

1. Information We Collect

We collect data during your visit to the website and, if you create a user account, to run that account:

  • Cookies and Tracking Technologies: We use Google Analytics to track website activity and gather usage statistics.
  • Data Collected Includes:
    • IP address
    • Browser type
    • Device type
    • Pages visited
    • Time spent on pages
  • Approximate Location: If you use the distance filter when searching for trails, your browser asks for your permission. We use your approximate location only to calculate the distance to trailheads and do not store it.
  • User Account: your email address. We keep no passwords: each time you sign in, we email you an 8-digit code that is valid for 3 minutes. Entering the code also confirms that the address is yours.
  • Sign-in with Google or Facebook: if you sign in through one of these providers, we receive from it the identifier of your account with the provider, your name, your email address, and the public profile data the provider passes on (for example a link to your profile picture).
  • Strava Activities: You can connect Strava to your account in your profile. When you connect, we receive from Strava the identifier of your Strava account, your name, and your public profile data. With your permission we read your Strava activities, including private ones if you allow it. From the GPS track of a run, hike, or walk we work out which trails from this website you have completed. We do not store the GPS track. We store only which trail you completed, when, the activity type, the Strava activity identifier, and the access tokens Strava issues to us. For the yearly total in your profile we also store the distance, elevation gain, and moving time of each counted activity.
  • Trail Lists: the trails you mark as favorites in your profile, add to your plan, or manually mark as done, together with the date.
  • Signed-in Devices: for each sign-in we keep the IP address, browser type, and time of last activity, so that on the "Sessions" page you can see where you are signed in and sign out other devices.
  • Bot Protection: the sign-in form is protected by Cloudflare Turnstile. During the check, Cloudflare processes your IP address and data about your browser and device.
  • Server Logs: To keep the website secure and fix errors, technical access logs are recorded automatically. Among other things, they contain your IP address, the time of the request, and the page visited. They are recorded whether you accept or decline cookies.

2. How We Use Your Information

  • To create and manage your user account and to sign you in, including sending sign-in codes and notices about changes to your account.
  • If you connect Strava: to mark automatically the trails you have completed. Only you see this data.
  • For the security of accounts and the website (the list of signed-in devices, bot protection).
  • To analyze website traffic and improve user experience via Google Analytics.

3. How We Share Your Information

We do not sell or rent your personal data. However, we may share your data with third parties for the following purposes:

  • Google, Meta (Facebook), and Strava: when you sign in through them or connect Strava. We exchange data with them only when you initiate it.
  • Cloudflare: to protect the sign-in form against bots (Turnstile).
  • Amazon Web Services (AWS): to send our emails (Amazon SES) from servers in the European Union.
  • Google Analytics: To analyze website traffic and usage.
  • Hribi.net: on some trail pages we show the weather forecast from the Hribi.net website. Your browser loads it directly from Hribi.net, so Hribi.net sees your IP address.

For more details, you can review:

4. Cookies

We use cookies for essential website functionality, including signing in and for analytics. Which cookies we use, and how to accept or decline them, is described in our Cookie Policy.

5. Data Storage and Security

  • User Account: we keep account data for as long as the account exists. Accounts whose email address was never confirmed are deleted automatically after 7 days.
  • Strava: we keep completed trails and access tokens for as long as Strava is connected to your account. When you disconnect Strava in your profile or on Strava, we delete them.
  • Account Deletion: you can delete your account yourself at any time in your profile ("Account" tab, "Delete account" button). The account and all data connected to it are deleted immediately, and the Strava connection is removed. You can also request deletion at support@giacosoft.com; in that case we carry it out within 30 days.
  • Retention: Server logs are deleted automatically after 30 days at the latest. Data collected through Google Analytics is retained by Google in accordance with its privacy policy.
  • Location: Data is stored on servers within the European Union. The exception is Google Analytics, described in Section 7.
  • Security: We apply appropriate technical and organizational measures to protect data against loss, misuse, and unauthorized access.

6. Legal Basis for Processing

Under Article 6 of the GDPR, we process your personal data based on the following legal grounds:

  • Consent (Article 6(1)(a)): For analytics cookies (Google Analytics), which you consent to through our cookie banner, and for your approximate location when searching by distance, which you consent to in your browser's prompt.
  • Performance of a Contract (Article 6(1)(b)): For your user account, signing in, and, if you connect Strava, marking completed trails.
  • Legitimate Interest (Article 6(1)(f)): For essential website functionality and the security measures necessary to operate it, including bot protection and the list of signed-in devices.

7. International Data Transfers

Some of the third-party services we use may transfer your personal data outside the European Economic Area (EEA):

  • Google Analytics: Google may transfer data to servers located in the United States. Google participates in the EU-U.S. Data Privacy Framework.
  • Sign-in with Google, Facebook, or Strava: data is exchanged with these providers' servers, which may be in the United States.
  • Cloudflare Turnstile: Cloudflare may process data on servers outside the EEA. Cloudflare participates in the EU-U.S. Data Privacy Framework.

We ensure that any international transfers of your personal data are protected by appropriate safeguards in compliance with GDPR requirements.

8. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Access: Request access to your personal data. You can download a copy of everything we hold about your account at any time in your profile ("Account" tab, "Download my data" button).
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data ("right to be forgotten").
  • Withdrawal of Consent: Revoke consent for data collection at any time.
  • Data Portability: Request to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
  • Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. For Slovenia, this is the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), available at www.ip-rs.si.

To exercise your rights, contact us at support@giacosoft.com.

9. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these sites. Please review their privacy policies when visiting them.

10. Updates to This Policy

We may update this Privacy Policy periodically. Changes will be reflected with a "Last Updated" date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at support@giacosoft.com.