Levadas (levadas.live) is a service that shows live hiking conditions for Madeira. This policy explains what we process, why, and the choices you have. We built the app to need as little of your data as possible.
No account is needed to browse and use the app. Premium is the only thing that needs an account: a passwordless email sign-in, no password. We set no tracking cookie unless you accept one. We never store your name, and we never store your raw location. The only location feature is fully optional, off by default, and only ever sends a coarse area, never your exact position.
Paid passes are sold by Lemon Squeezy as our Merchant of Record. Card details go straight to Lemon Squeezy under its own privacy policy; we never see or store them. See Legal & Payments for how this works and our refund policy.
We keep the list of processors short and only use them for the purposes above:
Some of these providers (Cloudflare, Lemon Squeezy, Google and Microsoft) are based in or may process data in the United States. Where personal data is transferred outside the EU or EEA, the transfer relies on the appropriate safeguards, namely the EU Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework. We do not sell your data.
You can browse and use the app with no account. Premium needs one. If you buy a pass, you sign in with your email address using a passwordless link (no password). In our database (Supabase, hosted in the EU) we store: your email address, your premium status and expiry, the Lemon Squeezy reference for your purchase, and a single session token, so a pass works on one device at a time. If you are signed in, your in-app preferences (saved trails, fit profile, plan and settings) are also saved to your account so they follow you across your devices. You can sign out at any time, and you can ask us to delete your account and its data by emailing privacy@levadas.live.
Asking for the GPX pack, or for a single trail track, means giving us an email address. We send you the file and we keep one row: your address, the language you asked in, which page you asked from, and where you came from one step before that page (the referring site and any campaign tag in the link, never a full URL and never your IP). We also record how you used that one page: how far down it you read, how long you stayed, which buttons you touched, the page of ours you were on immediately before it if there was one, and how many steps your browser tab had taken by then. All of that is read from the page you were on and held in your browser's memory only for as long as that page is open; it is sent with the form and nothing about it is stored on your device. If you then pick an arrival date on the page we link to, we keep that date so we can tell you if a trail closes, reopens or changes before you travel, and we write to you twice: once when you pick it, once a few days before you arrive.
If you accepted cookies, that row is also linked to your browsing. Where you have accepted analytics cookies, the random device identifier described above is saved on that row alongside your address. It lets us see which pages you read before asking for the file, and whether you later come back or buy a pass, so we can tell which parts of the site actually help. If you have not accepted cookies there is no identifier to save, the field stays empty, and none of this applies to you. We also match your address against our order records for the same reason: to know whether someone who asked for the pack later bought a pass. Deleting the row, below, removes both links.
There is no list and no marketing sequence. You can ask us to delete the row at any time by emailing privacy@levadas.live, and we will.
The purpose is a single thing: an aggregate, anonymized picture of how busy each trail is, so the app can eventually point people toward quieter routes. It is designed so that your movements cannot be singled out.
For the cookieless aggregate statistics we rely on legitimate interest in understanding basic usage. For the optional analytics cookies, the pseudonymous in-app usage analytics, and the optional location sharing we rely on your consent, which you give by accepting the banner or turning the toggle on, and which you can withdraw at any time under Profile → About Levadas → Privacy & cookies (withdrawing deletes the analytics cookies and stops session recording immediately). Where you buy Premium, we process your email and entitlement to perform our contract with you, that is, to give you the access you paid for.
Aggregate usage statistics are kept only in summary form. Pseudonymous in-app usage analytics (tied to a random device identifier, not to your name) are automatically deleted after about six months; the Moment thumbs-up/down feedback is kept up to a year to help us calibrate our forecasts. Crowd observations are stored as anonymous area counts; records that never reach the group floor are removed, and older aggregates are kept only as long as useful for the crowd indicator. Account data (your email, entitlement and synced preferences) is kept while your account exists, and is deleted on request or within a reasonable period after the account is closed.
Under the GDPR you have the rights of access, rectification, erasure, restriction of processing, objection, and data portability. You also have the right to lodge a complaint with a data protection supervisory authority. If you have not signed in, we hold no information that identifies you by name; the only data linked to your device is the pseudonymous usage identifier described above, which we cannot connect to a person without that device. If you have a Premium account, you can ask us to access, correct, export or delete the email, entitlement and preferences tied to it by emailing us. You can withdraw consent at any time by declining cookies and by turning off location sharing. To ask a question or make a request, contact us below.
Live data comes from Open-Meteo (weather and marine, CC BY 4.0; DWD ICON model © Deutscher Wetterdienst), IFCN (official trail status), IPMA (warnings, Fonte: IPMA), EFFIS (fire danger, © European Union, Copernicus EMS/JRC), NASA FIRMS (active fire), and OpenStreetMap contributors (maps and trail geometry, under ODbL).
Questions about this policy can be sent to privacy@levadas.live. If we change how we process data we will update this page and its date. See also our Terms of Service.