HutScanner Privacy Policy

Last updated: 10 August 2026

HutScanner is operated by Robert McLeod, based in the United Kingdom. Contact: hi@hutscanner.com. For the purposes of UK and EU data protection law, Robert McLeod is the data controller for the limited analytics described below, for the purchase email address, and for the newsletter list.

HutScanner is built to need as little of your data as possible. There are no accounts and no sign-in, almost everything happens on your device, and the only data we gather is anonymous, opt-out usage analytics - plus, if you buy a subscription on the web, the email address needed to deliver your access (see Payments and subscriptions below), and, if you choose to ask for it, the email address you give us for our newsletter (see The newsletter below).

No accounts, no sign-in

HutScanner has no user accounts and no login. We do not ask for your name, email address or any other personal information to use the app, and we never receive anything that identifies you. There are two exceptions, both of which you choose: buying a subscription on the web, where the payment step collects an email address (see Payments and subscriptions), and signing up for our newsletter (see The newsletter). Neither creates an account, a password or a profile.

If you enter your email address in a newsletter signup form on our website, we use it to send you our monthly email about hut availability and new regions. That is the only thing it is used for.

Nothing else is collected. We ask for an email address and nothing more. No name, no account, no password, no profile. We do not track which links you click in the emails.
We confirm before adding you. When you submit the form we send you a single email with a confirmation link. You are added to the list only when you click it. Until then your address sits in temporary storage on Cloudflare for up to 24 hours and is then deleted automatically. If you never confirm, we keep nothing.
Who processes it. Once confirmed, your address is stored by Resend, the email provider that sends the newsletter on our behalf as our processor. Resend also handles the unsubscribe link and stops sending to addresses that bounce.
Leaving. Every issue carries a one-click unsubscribe link. You can also ask us to delete your address at any time by emailing hi@hutscanner.com, and we will remove it from the list.
How long we keep it. Until you unsubscribe or ask us to delete it. We do not sell, rent or share the list with anyone.

Our lawful basis for sending you the newsletter is your consent, which you give by confirming the link and can withdraw at any time.

What stays on your device

Everything you create in the app - routes you build, saved itineraries, terrain preferences, region selections and any availability notes you enter by hand - is stored locally on your device only. It is not sent to us and is not synced anywhere. Removing the app removes this data.

Network connections the app makes

Map tiles are loaded from OpenFreeMap (openfreemap.org). Like any web request, this shares your device's IP address with that service so it can deliver the map imagery.
Hut availability updates are fetched from our content delivery network (cdn.hutscanner.com, hosted on Cloudflare). This downloads availability data to your device; it shares your IP address with the CDN to deliver the file, and sends no personal data.
App updates are checked through Expo's update service (expo.dev), which lets us ship bug fixes without a full app-store release. When the app starts it asks that service whether a newer version is available; like any web request this shares your device's IP address and basic technical details (such as the app and operating-system version), and sends no personal data.

These are standard requests needed to show the map and keep availability current. We do not use them to identify or track you.

Anonymous usage analytics

To understand which features and regions are useful and to find bugs, the app sends anonymous product-usage events to PostHog, our analytics provider. These events are processed on PostHog's European Union infrastructure on our behalf.

This data is not linked to your identity. The app generates a random identifier the first time you open it, stored only on your device, so that events from one install can be counted together. It is not your name, email, device serial or advertising ID, and it is reset if you reinstall the app.

What an event records:

The action taken - for example opening the app, selecting a region or hut, running a route search, exporting a GPX or booking list, viewing the subscription screen, or changing a setting.
Non-identifying context: the region and hut identifiers involved, the coarse shape of a route (such as how many nights), the app version, your platform (iOS, Android or web) and a per-session number.

What an event never contains: your name or email, the precise coordinates of your location, or any free text you type. As with any internet request, your device's IP address is visible to PostHog in transit and may be used to derive an approximate (city-level) location; we do not use it to identify you and do not store it as part of your profile.

You can turn this off. Open Settings → Privacy and switch off “Share anonymous usage data”. Once off, the app stops sending any analytics. Our lawful basis for this limited processing is our legitimate interest in maintaining and improving the app, balanced by keeping the data anonymous and giving you a one-tap opt-out.

Payments and subscriptions

HutScanner's core map and routing are free. Some features require a paid subscription. We do not run our own payment system and we never see or store your card details - payments are handled entirely by the platform you buy through:

In the mobile apps, payments are processed by the Apple App Store or Google Play. We receive only a pseudonymous purchase identifier confirming your entitlement - not your name, email or card details.
On the web, payments are processed by Stripe. Stripe collects your email address and card details to take the payment, under Stripe's privacy policy. We receive your email address so we can send your access key and let you restore or recover your purchase, and we store it for that purpose only. We do not receive or store your card details.

Our lawful basis for this limited processing is performance of our contract with you - providing the subscription you purchased. You can ask us to delete your purchase email by emailing hi@hutscanner.com, subject to any records we are required to keep for tax or accounting.

What we don't do

No advertising and no advertising trackers.
No analytics that identify you, and no cross-app or cross-site tracking.
No selling or sharing of your data with advertisers or data brokers.
No location tracking. The app does not request your device's location.

Hut availability data

Bed availability shown in the app is gathered from hut booking platforms' public pages. It describes huts, not people, and contains no personal data. It is indicative only - always confirm directly with the hut.

Children

HutScanner is not directed at children under 13 and we do not knowingly collect their data (beyond the limited purchase email described above, which is only provided by paying customers).

If this changes

If we later add optional features such as accounts or a subscription, we will update this policy and explain what those features collect before you use them. The latest version always lives at this page.

Your rights and contact

For the anonymous analytics, because it is not linked to your identity we cannot single out your records to retrieve or delete them - but you can stop all collection at any time from Settings → Privacy, and uninstalling the app removes the on-device identifier entirely. You have the right to object to this processing, which the opt-out gives effect to immediately. If you bought a subscription on the web, we also hold the email address you provided at checkout; you can ask us to access or delete it (subject to tax/accounting retention) by emailing hi@hutscanner.com. If you signed up for the newsletter, you can unsubscribe from the link in any issue, or ask us to access or delete your address at the same address.

If you have any question about your privacy, email hi@hutscanner.com and we will respond within one month. You can also contact the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.