Privacy policy.

“We” and “us” mean Trek Eleven, which is run by one person as a sole trader in Busselton, Western Australia (ABN 85 543 288 407). You can reach us about privacy at hello@trek11.com.au.

1. The short version

• You can use the whole website and app without an account, and we collect no personal information about you that way.
• If you sign in to add things, we keep a display name you choose, your passkey’s public key, and what you add. There is no password and no email address.
• We never keep passwords. We do not store or read IP addresses. We do not keep your location: your phone checks whether you are at a camp and only tells us “on site” or “not on site”.
• We do not sell your personal information. We do not run ads.
• In Settings you can download everything we hold about you, and delete your account and data.

2. Does the Privacy Act apply to us?

Trek Eleven is a small business. We expect it falls under the small business exemption in the Privacy Act 1988 (Cth), which generally covers businesses with an annual turnover of $3 million or less. If so, the Act may not apply to us directly.

We follow the Australian Privacy Principles anyway, because we think you should be able to trust us with your information. If the law changes, or the exemption stops applying to us, we will meet what the law then requires.

3. What we collect, and why

Looking around (no account)

When you look around without signing in, we do not collect personal information about you ourselves. (Cloudflare, who delivers the website, sees ordinary request details. See section 6.) Your phone keeps some things on the phone itself, such as saved sites, your area, your vehicle type and anything waiting to be sent. We do not receive these unless you sign in and send something.

If you allow it, the app uses your phone’s location. It uses it once, on your phone, to check whether you are at a camp (when you add something) or to show places near you. Your coordinates stay on your phone. The app works if you say no.

If you sign in

You sign in with a passkey. We keep:

• Your display name. You choose it (a first name or a nickname). It is public: we may show it to other campers next to what you add.
• The public half of your passkey, an identifier for it, which kind of device it came from, when it was made and when it was last used. The private half never leaves your phone.
• Sign-in sessions. A session lasts up to 180 days and runs on from each day you use the app. We keep only a scrambled (hashed) copy of the session token, the time it was made, last used and when it ends.
• A short code for adding another device, only while you are using it (10 minutes). We keep only a scrambled copy.
• Your points, your account’s creation date, and when you were last seen.

What you add

For each check, answer, tap, correction or problem report we keep:

• the site, the time, and whether you were “on site” (yes or no);
• if you were not on site and the app knew how far away you were, that distance rounded to 0.1 km (not a coordinate);
• what you said (for example “Showers: yes”, a fee, a note);
• the points it earned;
• the vehicle types you told the app you travel in, only for answers about access for those vehicles.

If you add a photo, we keep the photo, which site it is for, its size and when it was added. We remove location data (EXIF) from the photo before it is stored.

If you send feedback about the app, we keep your note, the app version and the time. You do not need an account to send it. If you are signed in, it is linked to your account.

We use this to run your account, show campers what is known about a site, work out your points, keep information fresh, stop cheating and abuse, and fix problems.

If you list a property

You sign in the same way. We keep what you enter: the property’s name and kind, the nearest town and shire, a pin on the map rounded to about 10 metres, what you offer, the facilities, your price, a booking link, a phone number (shown to campers only if you tick that box), your description, up to six photos with location data removed, and the web address of the website or Facebook page where you put your code. We show all of that to the public, but only after we approve it.

Your contact name, role and email are private. We use them only to manage your listing. Campers never see them. To check your code, our server may look at your website once.

We keep the time you ticked the four boxes (that you own or manage the property, that you hold the approvals needed, that you hold public liability insurance covering campers, and that the words and photos are yours to share).

If you join the testers

If you join the tester list on the website, we keep your email address, the date you joined, and a code for which form you used (for example “home-weekly-v1”). We use your email to send you emails about testing and a weekly Trek Eleven update.

The sign-up form says: “By joining, you agree to emails about testing and a weekly Trek Eleven update. Every email has an unsubscribe link.” That is your consent. Every email will say it is from Trek Eleven and will have an unsubscribe link. We stop emailing you within five working days after you unsubscribe. You can also unsubscribe by emailing hello@trek11.com.au.

If you claim a park listing

If you run a caravan park or campground and use the claim form, we keep the place, its type and town, your name, role, email, phone number if you give it, and your message. We use them to check and manage the listing and to reply to you.

If you email us

Emails to hello@trek11.com.au pass through Cloudflare Email Routing and arrive in a personal email account (Gmail) used by the person who runs Trek Eleven. We keep what you send and our reply, so we can deal with your request.

4. What we never collect

• Passwords. There are none.
• Your location coordinates. Your phone works out whether you are at a camp and only tells us “on site” or “not on site”, plus a rounded distance (to 0.1 km) when you are not.
• IP addresses. We do not store IP addresses or read them. The limits that protect the service from overload use whole-site counters, not addresses. Cloudflare, who delivers our website, cannot avoid seeing the IP address of each request, and it may keep that in its own logs under its own policies (see section 6).
• Contacts, your microphone, your browsing history, or advertising identifiers.

5. Cookies and similar things

• One sign-in cookie. If you sign in, we set a cookie named __Host-t11. It keeps you signed in. It is for sign-in only, not for advertising or tracking. It is sent only over a secure connection and cannot be read by scripts on the page. It lasts up to 180 days and is extended each day you use the app. It is removed when you sign out or delete your account.
• Storage on your phone. The app stores your settings, saved sites, and anything waiting to be sent in your browser’s storage, and keeps a copy of the app on your phone so it opens without signal. You can clear it in Settings (“Clear everything on this device”) or in your browser.
• Analytics. We do not use analytics or advertising trackers. If we turn on Cloudflare Web Analytics, which does not use cookies and does not follow you around the web, we will change this page first.

6. Where it is kept, and who can see it

Where. Our website, database and photo store run on Cloudflare. Cloudflare has servers in many countries, so information stored with it can be held or handled outside Australia. We have not chosen a database region. Cloudflare may also keep short-term backup copies.

Who sees it.

• The public. Approved photos, owner listings, and the facts we work out from many people’s answers. We show your display name only as set out in section 3. Anyone with the web address of an approved photo can see it.
• Us. Trek Eleven’s admin, and anyone we ask to help us. Admins can see names, contributions and photos so they can check them.
• Cloudflare (hosting, database, photo store, email routing and the domain name system). It handles our information for us.
• Google. The website and the app load the Archivo typeface from Google Fonts, so Google can see your internet address when a page loads. Our email account is a Gmail account. We plan to host the font ourselves before launch.
• Code libraries. The app loads two map libraries from cdnjs.cloudflare.com and cdn.jsdelivr.net. Those services can see your internet address when your browser asks for the files. We plan to host them ourselves before launch.
• Authorities, if the law requires it.
• A new owner, if Trek Eleven is sold or moves to a company, on the same terms as this policy.

We do not sell your information. We do not give it to advertisers or data brokers.

Official warnings and road information come from public feeds. We do not send anything about you to those sources.

7. How long we keep it

We do not yet delete old information automatically. We review it by hand, and we will set automatic limits before the public launch. For now:

• Your account and what you add stay until you delete your account.
• Sign-in sessions end 180 days after you last used the app. Sign-in challenges last 5 minutes and add-a-device codes last 10 minutes.
• Tester sign-ups and park claims stay until you ask us to delete them, or until we close the tester list.
• Property listings stay until you delete them or your account.
• Feedback notes stay until we have dealt with them. If you were signed in, they go when you delete your account.
• After you delete your account, we keep your answers to questions about sites (for example “Showers: yes”) without your name. We have already combined them with other people’s answers, and we cut the link to you, so we cannot tell who gave them. See the Contributor terms.

8. Seeing, correcting and deleting your information

• Download. In the app, go to Settings, then Account, then “Download my data”. You get a file of everything we hold about you.
• Correct. In Settings you can change your display name. For anything else, email us.
• Delete. In Settings, then Account, then “Delete my account and data”. This removes your account, passkeys, sessions, checks, reports, taps and notes, photos (and their files), feedback notes, points, and any property listings with their photos. It cannot be undone. The only thing that stays is what section 7 describes.
• If you cannot get into the app. Email hello@trek11.com.au. We hold no email address for accounts, so we cannot match you to an account by your email. Tell us your display name, roughly when you joined and what you added, and we will decide whether we can safely act. If you joined the tester list or claimed a park listing, tell us the email address you used.
• We aim to reply to any request within 30 days. Normally it is much faster.

9. Keeping it safe

• Sign-in uses passkeys, so there are no passwords to steal. We keep only the public half of a passkey.
• We keep only scrambled copies of session tokens and add-a-device codes.
• Photos are private until we approve them. We remove location data from them.
• The admin page is for admins only.
• No system is perfectly secure. If a breach happens that is likely to cause serious harm, we will tell the people affected, and the Office of the Australian Information Commissioner where the law requires it.

10. Children

Anyone can use Trek Eleven, including children. Families often camp together, and children can have their own account to earn points. If you are under 16, a parent or guardian must agree before you make an account. An account holds very little: a display name you choose (use a nickname, not your full name), a passkey and what you add. We do not ask for age, school, photos of you or contact details. Photos of people’s faces are not allowed in contributions. A parent or guardian can ask us to delete a child’s account at any time, or do it in Settings on the child’s phone.

11. Complaints

If you are unhappy with how we have handled your information, tell us at hello@trek11.com.au. We will look into it and reply. If you are still not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

12. Changes to this policy

We may change this policy. The new version goes on this page with a new date. For changes that matter to you, we will tell you in the app and on the website.

Draft, to be checked by a lawyer before launch. Nothing on this page is legal advice. Draft 1, 20 October 2026.