Privacy Policy

Trout & Trails (“we,” “us,” “our”) is operated by One Overland, LLC, a limited liability company organized in the United States. This Privacy Policy explains how we handle personal information we collect when you use troutandtrails.com, our mobile app, our email communications, and our APIs (collectively, the “Services”).

Account information

When you sign up, we collect your email address, the password (stored as a hashed value we cannot read), and the first and last name you provide. You may add a username, display name, bio, profile photo, cover photo, home water, and location text.

Content you create

We store the posts, comments, reactions, catches (species, length, weight, photos, GPS coordinates if you provide them), trip plans, tournament registrations, marketplace listings, page reviews, FishWiki edits, and direct messages you send. Photos may include EXIF metadata such as timestamp and GPS that we use for tournament verification.

Payment information

Payments for Angler Pro subscriptions, merch orders, tournament publish fees, and tournament entry fees are processed by Stripe. We never see or store your full credit card number. Stripe sends us a customer ID, the last four digits of the card, brand, and payment status.

Technical information

We log standard technical info on every request: IP address, browser user-agent, referrer URL, and approximate geolocation derived from IP. We also store a device UUID in your browser's localStorage that helps us flag shared-device suspicious activity in tournaments.

Push notification tokens

If you grant browser push permission, we store a Web Push subscription endpoint per device so we can send you notifications you opted into (buddy alerts, tournament events, smart alerts).

• Run the Services — account login, content storage, payments.
• Send transactional email (sign-up confirmations, password resets, order receipts).
• Send the weekly Drift digest if you've opted in.
• Verify tournament catches for fairness.
• Surface aggregated platform stats (chapters listed, catches logged) on marketing pages.
• Detect abuse, spam, and platform manipulation.
• Comply with legal obligations.

We use third-party processors who handle specific jobs on our behalf. None of them are permitted to use your data for their own marketing or analytics.

• Supabase — primary database, file storage, authentication, realtime updates.
• Vercel — application hosting, edge caching, runtime logs.
• Stripe — payment processing for subscriptions, merch, and tournament fees.
• Resend — transactional and digest email delivery.
• Google Cloud (Gemini) — optional AI species verification for tournament catches when the organizer opts in.
• OpenStreetMap / Nominatim — geocoding location strings into map coordinates.
• Recreation.gov (RIDB) — campground data seeded into our directory.

We do not sell your personal information. We may disclose information when legally required (subpoena, court order) or to protect the Services or other users from harm.

By default, posts you create are visible to anyone signed into Trout & Trails. The composer audience selector lets you scope each post to Community, Buddies only, or Only me. Your profile, posted catches, page reviews, FishWiki contributions, and tournament leaderboard placement are public to signed-in users. Marketplace listings are visible to anyone signed in. Direct messages are visible only to participants.

We use first-party cookies to keep you signed in (the Supabase auth session cookie) and to remember the offline catch queue and device UUID via browser localStorage. We don't use third-party advertising or analytics cookies.

• Access and correction: view and edit most of your data on your profile and content pages.
• Delete your account:use the “Delete account” control on your profile page. Deletion removes your posts, catches, photos, group memberships, DMs, and active subscription.
• Opt out of digest email: toggle on your profile page or click the one-click unsubscribe link in any digest email.
• Opt out of push notifications: revoke browser push permission in your browser settings.
• Export your data: email admin@oneoverland.com with the subject “Data export” and we'll send you everything we have on file.

If you're a California, Virginia, Colorado, Connecticut, or Utah resident (or in any other jurisdiction with similar laws), you have additional rights including the right to request a copy of your data, the right to delete, and the right to opt out of any “sale” or “sharing” of personal information (we do not sell or share for cross-context behavioral advertising). Exercise these rights by emailing us.

Trout & Trails is intended for users 13 and older. We don't knowingly collect personal information from children under 13. If we learn we've collected information from a child under 13, we'll delete it. If you believe a child has signed up, email admin@oneoverland.com.

We keep your data for as long as your account is active. When you delete your account, we irreversibly remove the content listed above. We may retain limited records required for legal, tax, or fraud-prevention purposes (e.g., Stripe transaction history per IRS rules).

We use TLS in transit, server-side encryption at rest (provided by Supabase and Vercel), Row-Level Security policies at the database level, and audit logging on administrative actions. No system is perfectly secure; if we discover a breach affecting your data we'll notify you in a timely manner consistent with applicable law.

We operate primarily in the United States. If you access the Services from outside the U.S., your information will be transferred to and processed in the U.S.

We may update this Policy occasionally. Material changes will be announced in the app and via email at least 14 days before they take effect. The “Effective” date at the top of this page reflects the most recent update.

One Overland, LLC
Email: admin@oneoverland.com