Small print
Privacy
The short version
Every Munro has no analytics, no advertising and no cookies. You can use all of it without an account. If you make one, we keep your email address, your name and your tick list so it follows you to any device, and nothing else. Recorded walks and saved maps stay on your own device. To draw the map, your browser fetches tiles from three outside services, and each of them sees your IP address.
Data controller
Nathan Minnis (United Kingdom) is the data controller for this site. Contact: nateminn@gmail.com.
Cookies and browser storage
This site sets no cookies. It uses your browser's localStorage only for things you ask it to do:
| Key | What it holds | Why |
|---|---|---|
munro:bagged | The list of Munros you have marked as bagged (their short names, for example ben-nevis). | So your tick list and the count in the header survive a reload. Strictly necessary for a feature you use, so no consent banner is needed. |
munro:me | When you are logged in: a copy of your name, email and tick list, and any changes not yet sent to your account. | So pages show your list straight away and ticking works with no signal. Removed when you log out. |
sb-…-auth-token | When you are logged in: your login session from our account provider, Supabase (a token, not your password). | Keeps you logged in. Removed when you log out. |
munro:units | "C" if you switched the weather to °C, km/h and metres. | Keeps your choice of units. Only exists if you switch. |
munro:offline | Which routes you saved for offline use, when, and their size. The saved maps and pages themselves sit in this browser's cache storage. | So saved routes work with no signal, and so you can remove them. Only exists if you save one. |
munro:track | The GPS points of a walk while you are recording it. | So a recording survives a reload or losing signal. Removed when you stop. |
munro:walks | Your last 30 recorded walks: the GPS points, times and whether you reached the summit. | So you can see and download your walks. Only exists if you record one. |
All of this is strictly necessary for features you choose to use, so there is no consent banner. Apart from your account (below), none of it leaves your device. To delete it, log out, untick your Munros, or clear this site's data in your browser settings.
Services your browser contacts
The site's own pages, scripts and fonts come from the same server as this page. Summit conditions come from a file on this site that we refresh from MET Norway once an hour, so your browser does not contact a weather service. While you use the map, your browser also requests data directly from:
Service Address What it receives EOX IT Services (Sentinel-2 cloudless satellite tiles) tiles.maps.eox.atYour IP address, browser details and which map tiles you view (so roughly which area you are looking at). EOX privacy notice. OpenFreeMap (footpath and track lines drawn over the satellite map) tiles.openfreemap.orgYour IP address, browser details and which map tiles you view. OpenFreeMap privacy. Supabase (accounts, only when you sign up, log in or change your list) *.supabase.coYour IP address, browser details, and what you send: your email, password (stored only as a one-way hash), name and tick list. See Accounts below. Amazon Web Services (terrain tiles from the AWS Open Data programme) s3.amazonaws.comYour IP address, browser details and which terrain tiles you view. AWS privacy notice.
We do not send them anything else, and we do not receive what they log. Before the site launches the map tiles will move to storage we run, and this page will change to say so.
Your location
If you press the location button on a route map, your browser asks for permission, then uses your device's GPS to put a dot on the map and say how far along the route you are. Your position stays in your browser: it is never sent to us or to anyone else. Nothing is kept unless you press "Start recording", which saves that walk in this browser only (see the table above).
Accounts
Accounts are optional. If you make one, we keep:
- your email address, and your password as a one-way hash (nobody, including us, can read your password);
- the name you give;
- the Munros you have ticked and the dates you climbed them;
- when the account was made and when you last logged in, and the IP address of each log-in, kept in short-lived security logs.
Why: to provide the account you asked for (the legal basis is contract). We do not use it for marketing, and we never sell or share it.
Where: with Supabase, our account and database provider, on servers in London. Supabase acts as our processor under a data processing agreement. Emails about your account (confirming your address, login links, password resets) are sent through Supabase.
How long: until you delete your account. "Delete my account" on the Your Munros page removes your login, name and tick list from our database at once. Copies in our provider's backups are overwritten in their normal cycle.
Not stored on our servers: your recorded walks and GPS tracks, saved offline maps and your units setting. They stay on your device.
What we collect
Only what is listed under Accounts, and only if you make one. If you email us, we keep the email only as long as needed to reply, then delete it within 12 months.
The site is hosted by Netlify, which keeps standard server logs (IP address, page requested, time) for security and to run the service. Netlify privacy.
Your rights
Under UK GDPR you can ask what personal data we hold about you, ask us to correct or delete it, ask for a copy to take elsewhere, and object to how it is used. You can delete your account yourself at any time. Email nateminn@gmail.com; we will reply within one month. If you are unhappy with the answer you can complain to the Information Commissioner's Office.
Who runs this site
Nathan Minnis, United Kingdom. Email nateminn@gmail.com. Every Munro is a personal project, not a registered company, and it does not sell anything.
Last updated 24 October 2026.