Privacy

Last updated November 13, 2026.

TrailSocial is a small hobby community. We don't sell anything, we don't show ads, and we don't track you around the internet. This page says what the site and the Android app keep, who can see it, and how to get things removed. It covers the website at trailsocial.net and the TrailSocial app on Android, which is the same club in an app.

Who it's for

TrailSocial is for people 13 and older. When you make an account you tick a box to say you are 13 or older. It is only a tick box, so we can't check it for you. If you're under 13, please don't make an account. If we find out an account belongs to someone under 13, we delete the account. If you are a parent or guardian and think your child has an account, email us at [email protected] and we'll delete it. We don't knowingly collect anything from children under 13.

What we keep

Your account: your username and your password (the password is scrambled, so nobody, including the admins, can read it), when you joined, and whether you have confirmed you are 13 or older.
Your two security answers: when you make an account we ask two questions (your favourite bottled water and your favourite time of day). We keep your answers. If you get locked out, a moderator asks you the same two questions and compares what you say with the answers on file before helping with a password reset. That only works if they can read them, so the answers are stored readable, not scrambled. The moderators and admins who handle password-reset requests can see them. Other members can't.
What you put on the site: posts, comments, reactions, pictures, videos and GIFs you share, your profile and page, the groups you join, your characters and drawings, and your messages and group chats in the Social Club.
Pictures and videos: what you upload is kept until you delete it or your account is deleted. Pictures and videos are stored with Cloudflare R2.
Game results: Wordle, Trailvia and BrainSocial keep your answers, your results, your streak and your points, and show your name on the scoreboards.
If you link Discord: your Discord name and ID, so the site can send you a password-reset code and show your Discord profile picture.
The Android app: the app keeps your login on your phone so you stay signed in. If you switch on notifications, your phone gets a "push token" (a code Google's notification service makes for your phone) and the app gives it to our server so we can send you notifications about replies, mentions and messages. We keep up to five of these per account. We use the token to send you notifications and nothing else. You can turn notifications off in the app (Settings, then Notifications) or in your phone's own settings for the app. Logging out or deleting your account removes the token.
Technical records: the server keeps short-lived records of requests (including your internet address, IP) to keep the site running and to block abuse, such as people guessing passwords.
Reports: if you report something (see "Reporting and blocking" below), we keep the report so a moderator can deal with it. A report holds who sent it, the reason and note they gave, a link to what was reported, and a short copy of the reported text (the first 300 characters), so a moderator can still see what it was if it gets edited or deleted. Reports stay on file as a record for the moderators, even after they have been dealt with. Only moderators and admins can see them, and the person reported is never told who sent one.

Who can see it

Posts on the Newest feed, profiles and single posts can be seen by anyone, even without an account. Don't post what you wouldn't want a stranger to read.
Posts inside private groups, and your direct messages and group chats, are only for the people in them. The site's admins run the server, so they can technically reach the data behind it.
Voice in the app and on the site (VoiceRooms and Theater). The microphone only turns on when you join a voice room and say yes when your phone or browser asks. Your voice goes live to the other people in the room, straight from device to device where it can. To set that up, devices ask Google's public connection helpers (STUN servers) how to find each other, which means Google sees your internet address for a moment. Some networks block direct connections, and the server can be set up with a relay that passes the audio along instead. Either way we don't record voice or video, and we don't store it.
Speech to text in VoiceRooms is off unless you switch it on. Your browser then turns your voice into words (Chrome and Edge do that by sending your voice to Google or Microsoft). The words are shown over your head to the people in the room and are not saved by us.
Reports are read by the club's moderators and admins, and nobody else.

Other services the site touches

OVH hosts our server, in a data centre in Canada. Your data lives there.
Cloudflare sits in front of the site to protect it from attacks, so your visit passes through them. They may set a small security cookie.
Cloudflare R2 stores the pictures and videos people upload, and holds the encrypted copies of our backups.
Google (Firebase Cloud Messaging) delivers the notifications to the Android app. It gets your push token and the text of the notification so it can show it on your phone.
Google (STUN servers) help voice rooms connect, as described above. They see your internet address.
YouTube (Google) videos use YouTube's privacy-enhanced player. Nothing is loaded from YouTube until you press play on a video. Once you do, YouTube can see your internet address, as it would on any website.
Klipy provides the GIF picker. It is only contacted when you open the GIF search. When you search, the words you type go to Klipy together with your club ID (a random code the site gave your account, not your name), and Klipy sees your internet address. If you pick a GIF, Klipy is told which one and what you searched for. If you never open the GIF picker, nothing is sent to Klipy.
Discord: rooms and groups can be linked to our Discord server. Messages, replies and pictures in a linked room appear on both sides, so people on Discord can see them. Discord profile pictures load from Discord. When someone sends a new report, the team also gets a short note in their Discord channel (the same one the contact form uses) that a report came in, with the reason and type only. It has no names and none of the reported text.
Fonts (the lettering) are kept on our own server. They are not loaded from Google.
Group owners can decorate their group's page. They might include pictures or other things from other websites, which loads them from there while you look at that page.

Who can see your internet address: every website you connect to can see it. On this site that means us, OVH, Cloudflare, and Google and Klipy in the cases above. We don't use it to build a profile of you or to show you anything.

Backups: we keep backups of the site's data in case the server breaks. The copies kept off the server are encrypted, and old ones are thrown away after about 30 days.

Cookies and tracking

We don't use advertising or analytics cookies and we don't run any tracking tools. The site keeps your login and your settings (like your theme) in your own browser's storage so you stay logged in. That is the only thing it needs, so there is no cookie banner. You can clear it any time by logging out or clearing your browser's site data.

Reporting and blocking

You can report a post, comment, message or profile with the Report option in its menu in the Android app. On the website, write to us (see below) or message an admin. Reports go to the club's moderators and admins, who look at them and decide what to do. You can also block someone from their profile or a post menu. Blocked people can't message or mention you. If you'd rather write to us, use [email protected]. The rules say what isn't allowed, and the child safety page says how we handle anything involving children.

Getting things removed

You can delete your own posts, comments and messages whenever you like.

Deleting your whole account: use the delete-your-account page. You don't need the app for it. It deletes your account, your profile and what you posted, and it happens right away once you confirm with your password and by typing your username. There is no waiting period and no undo. Copies of the site's data in our backups disappear on their own within about 30 days. Your username stays reserved so nobody else can pretend to be you.

What stays after you delete:

The reserved username (just the name and a random number, nothing else).
Backups, for about 30 days, as above.
Reports other members sent about you may be kept for up to 90 days for the moderators and are then dropped, so deleting an account can't be used to wipe a report. Reports you sent stay for the moderators without your name.
Replies other people wrote under your comments stay, under an empty "deleted" note. Games you took part in with other people (Trailphone, the war games and similar) keep the game with your name swapped for a placeholder. A war-game lobby that is still open can show your name until it cleans itself up, within 7 days at the most.
A colour theme of yours that the admins approved for everyone stays, with "Deleted user" as the author. A group picture you set on a group comes off the group.
The log of what moderators did stays, with your name replaced.

The delete-your-account page lists all of this in full.

If you can't log in, or you'd like to know what we hold about you, email [email protected], or message an admin in the Trailblazer Social Club or on the TrailSocial Discord server, and we'll sort it out. Parents and guardians can ask the same for their child's account.

Changes

If this page changes in a way that matters, we'll say so in the Social Club. Questions? Email [email protected] or ask an admin.

Privacy · Rules and terms · Child safety · Delete your account