Privacy Policy
Last updated: August 2026
HutLists ("we", "us") operates hutlists.com. This policy explains what data we collect and how we use it.
Data We Collect
- Analytics: We use Google Analytics 4 to understand how visitors use the site. GA4 collects anonymised usage data (pages visited, session duration). This data is only collected after you accept cookies.
- Server logs: Our hosting provider (Hetzner) retains standard server access logs for security purposes.
- No accounts: HutLists does not require registration, and we never ask for or store a password. You can browse the entire site without giving us any personal data.
- Newsletter sign-ups: If you subscribe, we store your email address, the time you gave consent, and the IP address the sign-up came from (as proof of consent). Your email is also shared with our email provider, Kit, so we can send you the newsletter. You can unsubscribe from any email at any time.
- Hut reviews: If you submit a review, we store the name you give, your review text and rating, the month of your stay, the time you gave consent, and the IP address the submission came from (to prevent spam and abuse). Providing your location and email address is optional. Your name and location are published alongside your review; your email address and IP address are never published — we only use your email if we need to ask you something about your review.
- Review photos: Photos you attach to a review are published on the hut's page. Before storing them we automatically strip all embedded metadata, including any GPS coordinates your camera or phone recorded.
Reviews & Moderation
Every review is read by a person before it appears on the site. We may decline to publish a review, or remove one later, if it is not a genuine first-hand account, contains personal data about someone else, is abusive, or is promotional. Published reviews remain on the hut's page until you ask us to remove them.
Cookies
We use a single first-party cookie to store your cookie consent preference. Google Analytics cookies are only set after explicit consent. You can withdraw consent at any time by clearing your browser cookies.
Third-Party Services
- Google Analytics 4 — analytics (consent-gated)
- Google AdSense — advertising, where enabled (consent-gated)
- Kit — newsletter delivery (receives your email address if you subscribe)
- Google Fonts — typography delivery
- Leaflet / OpenStreetMap — map tiles (no personal data shared)
Your Rights
Under GDPR you have the right to access, rectify, or erase any personal data we hold about you — including asking us to take down a review you submitted, or to remove your name from it. Email [email protected] and we will action it.
Contact
Questions about this policy? Email [email protected].