Privacy Policy

1. Who we are

canyoning.co.il is a free, open catalogue of rappelling and canyoning sites in Israel. It is part of Community Ropes (ropes.community), which is operated by Kama Trails (שבילי קמה) ("we"). The system was built and is run for us by the software company Codama. Privacy requests: hello@ropes.community .

2. Browsing the site

• No account is needed, and we don't ask for any details.
• Our hosting provider (Cloudflare) logs normal browsing data, such as IP address, browser type and the page requested, for security and operations.
• Maps load from OpenFreeMap and elevation data from AWS Open Data. Your browser contacts them directly, so they see your IP address, as with any website. The trail layer loads from our own server.
• "Sites near me": if you allow location access, your location is used only inside your browser to sort the list. It is not sent to us.
• Videos are embedded from YouTube in its no-cookie version (youtube-nocookie.com) and load only when you reach them on the page. When you play a video, YouTube (Google) may collect data under its own policy.

3. A field report without an account

What we keep:

• The name shown on the report (published). A first name is enough.
• An email, optional. Not published. Used only if we need to ask about the report.
• When you were there, whether you went through or only watched, how much water there was, the water temperature and a rating (optional), and free text (optional).

4. A photo without an account

What we keep:

• The photo. It is resized on your device to at most 2048 pixels and saved without location data.
• A Hebrew caption, and an English caption (optional).
• A name for the credit (published next to the photo).
• An email, required. Not published. Kept with the licence approval, in case we need to ask about the photo.
• The version of the licence text you approved and when.

5. What we keep with every submission without an account

• A Cloudflare Turnstile check, which confirms the sender is a person and not a bot.
• A keyed hash of your IP address, not the address itself. It is used only to limit the number of submissions and prevent spam.
• Your browser keeps a copy of the reports you sent, for 14 days, so you can see them while they wait for approval. Nobody else sees that copy.

6. Registered contributors

Signing in on the site (a code by phone, a code by email, or Google) uses a Community Ropes account. The account data is described in the Community Ropes privacy policy: https://ropes.community/en/privacy/ . A registered contributor's display name and prusik count appear next to their contributions. Registered contributors can also add comments, suggested corrections and links to YouTube videos.

7. What is published and who sees what

• After approval we publish: the name, the report or photo, the caption and the date.
• The email and the IP hash are never published.
• Every contribution is reviewed before publication. Pending contributions, including name and email, are seen by community moderators we approved and by our team. Moderators get an email when contributions are waiting for review.
• Providers who work for us (section 8).
• Authorities, only when the law requires it.
• We don't sell data to anyone.

8. Providers

• Cloudflare: hosting, security, Turnstile and passing submissions to our server. Global network.
• Supabase: database and photo storage. London, UK.
• Railway: the API server. Netherlands.
• Hetzner: our self-run notification system (Novu). Germany. Infobip: sending email.
• SMS4Free: SMS sign-in codes for registered contributors. Israel.
• Google: sign in with Google, only if you choose it, and YouTube videos. United States.
• OpenFreeMap and AWS Open Data: map tiles and elevation data.

Some servers are outside Israel. Transfers follow the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

9. Why, and on what basis

• To publish what you asked us to publish, with the credit you chose.
• To protect the site from spam and abuse.
• To ask you about your report or photo, only if you gave an email.

You are not legally required to give any details. Without a name you cannot send a report, and without a name and email you cannot upload a photo.

10. How long we keep data

• A published contribution stays on the site until it is removed.
• A rejected or hidden contribution is marked as such and not shown, but stays in the database.
• Database backups are kept for a limited time.
• On request we will delete the contribution, the name or the email within 30 days, except what the law requires us to keep.

11. Your rights

You can see the data about you, ask us to correct it, and ask us to remove a contribution, a name or an email (sections 13 and 14 of the Law). Write to hello@ropes.community and we will answer within 30 days. Note that published content may have been copied by others before we removed it. You can also contact the Privacy Protection Authority at the Israeli Ministry of Justice.

12. Cookies and browser storage

• The site uses no advertising cookies or tracking tools.
• Your browser keeps: sign-in details for registered contributors, a copy of the reports you sent (14 days), the map style you chose, and alerts you closed on a page.
• Cloudflare Turnstile checks the browser to block bots.
• YouTube videos may store data when you play them.

13. Minors

The site is open to everyone. Accounts are for people aged 18 and over. If you are under 18, ask a parent before sending a photo or an email.

14. Changes

We will post any change here and update the date.

15. Contact

hello@ropes.community