Privacy, terms, and where the data comes from.

Trig. is run by Harbour Labs Digital Ltd, a company registered in England and Wales (number 17200663), whose registered office is at 71–75 Shelton Street, Covent Garden, London WC2H 9JQ. It is responsible for the personal data described here. For anything on this page, or to use any of your rights below, email support@trigpoint.app. You will get an answer within a month.

The short version: Trig. keeps your account details and your record of where you have been, because that is the product. It does not sell data, show adverts, or run analytics. The shop is run differently, and is covered in Shop and books.

What we keep, and why

• Your account: your email address and password (stored only as a one-way hash), and a display name if you choose one. Needed to run the account you asked for.
• Your home county, if you set one: stored as the county’s centre point, never your address. Used only to order pillars near you.
• Your record: each pillar or hill you record, the date, and whether you ticked it or it came from an upload. This is the record you came for; badges and certificates are worked out from it.
• GPX uploads: a track is read once to find the pillars and hills you passed, and then discarded. We keep the file’s name, a few counts about it, and the matches we suggested until you confirm or reject them. The track itself, with its timestamps and route, is not stored.
• Condition reports: the status you chose, any note, and any photograph. Photographs are private to you unless you choose to share one on the pillar’s public page.
• Payments: Stripe takes your card details; we never see them. We keep Stripe’s references for your customer and subscription, and whether it is active, so we know what you have paid for.
• Help messages: what you send through the Help button, with your account, so we can answer it. Deleted with your account.
• Your December email setting: whether you want your year in pillars by email each December (on unless you turn it off), and the years we have sent it, so nobody gets it twice. Deleted with your account.
• Server logs: our host records requests, including IP addresses, for a short time to keep the site running and secure.

Who handles it for us

Supabase stores the database, accounts and photographs. Vercel hosts the site. Stripe handles payments. Resend sends account emails such as password resets, and the December year-in-pillars email. Sentry receives a report when something on the site breaks: what failed and where, with no cookies, IP addresses or form contents, though a report can include your account’s random identifier. Sentry stores these reports in the EU. Each acts only on our instructions. Map tiles are fetched from Ordnance Survey by our server, so your browser never contacts them. Some of these providers may process data outside the UK; where they do, they use the safeguards UK law requires. The shop is covered in Shop and books below.

The December email

On 28 December, members of the full record who recorded at least one visit that year get one email with their year in pillars. It is about your own account, and every one carries a link to stop it; you can also turn it off on your account page. Nobody who recorded nothing that year is sent it.

How long we keep it

• Everything above, for as long as your account exists.
• When you delete your account, everything goes straight away.
• Stripe keeps invoices and payment records for six years, because tax law requires it. We cannot delete those.
• Database backups hold a copy of deleted data for up to seven days before they are themselves overwritten.

Deleting your account

From your account page, type DELETE to confirm. Your record, uploads, condition reports, photographs, badges and profile are removed at once, and any subscription is cancelled at the same moment with no further charge. A pillar’s recorded condition may change if your report was the latest one on it. Deletion cannot be undone.

Your rights

You can ask for a copy of what we hold about you, have it corrected, have it deleted, or object to how it is used. Email support@trigpoint.app. If you are not happy with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.

Members of the full record can also download their own record at any time, as a spreadsheet or a GPX file, from their account page.

Age

You need to be 13 or over to create an account.

Changes

If this changes in a way that matters, we will say so on this page and email members before it takes effect. Last updated 3 November 2026.

trigpoint.app sets three cookies, all needed for the site to work, so there is nothing to accept.

• Your sign-in session, set by our account system when you sign in and removed when you sign out.
• trig_member, which holds only the value “1” so the header can show “Your record” instead of “Sign in” before the page has finished loading. It lasts 400 days and identifies nothing.
• trig_after_confirm, set when you sign up and removed when you confirm your email. It holds only the page you were heading to, so the confirmation link can take you there. It lasts a week at most.

On trigpoint.app, no tracking, advertising or analytics cookies, and no third-party scripts that set any. The shop sets its own, only with your agreement: see Shop and books.

This applies to shop.trigpoint.app and to the log books and prints bought there. It does not change anything above about trigpoint.app and your membership.

Who sells

The shop is run by Harbour Labs Digital Ltd, trading as Trig. (company number 17200663, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ), the same company that runs trigpoint.app. Email support@trigpoint.app.

The shop has its own privacy policy, terms and delivery and returns page, and those are what apply to an order. This section is a summary. If the two ever differ, the shop’s own text governs a shop order.

What the shop collects

To take and deliver an order: your name, email, delivery and billing address, phone number if you give one, what you ordered and what you paid. For a personalised poster, the names, dates and hills you ask us to print. We never see your full card number; Shopify Payments handles it.

Your shop details and your Trig. account are kept separately. Buying a book does not create a Trig. membership, and having a membership does not put you on a shop mailing list. We email you about the shop only if you sign up for that.

Who handles it for us

• Shopify runs the shop, checkout, payments and order emails. It also uses some information for its own purposes, such as Shop Pay and fraud checks, and for that it is responsible for your data under its own privacy policy.
• Lulu prints and posts log books, and receives your name, delivery address, phone number if given, and the books you ordered.
• Printful prints and posts posters sent to the US, and receives your name, delivery address and the poster ordered.
• Royal Mail delivers UK posters, with your name and address.
• Judge.me sends review requests and shows reviews.
• Shopify Email sends the newsletter to those who sign up.

Some of these are based in, or store data in, the US, Canada or the EU. UK law treats the EU and Canada as giving your data equal protection. For the US, we rely on the UK–US data bridge where the company is certified under it, and otherwise on the UK’s approved contract terms for international transfers.

Why we use it, and how long we keep it

• To make and deliver your order, which is our contract with you.
• To keep accounts, because the law requires it. Order records are kept for six years.
• To prevent fraud, which is in our legitimate interests.
• To send news only if you sign up, with your consent. Every email has a link to stop them.
• Messages to us are kept as long as needed to help you, then deleted.
• A review is kept for as long as it is shown on the shop. Ask us and we take it down and delete it.
• A shop account is kept until you ask us to close it, or deleted after three years with no orders or sign-ins. Closing an account does not remove the order records we must keep.

Cookies on the shop

The shop sets the cookies it needs to work, such as the one that keeps your basket. Analytics cookies (Google) and advertising cookies (Meta and Google) are set only if you allow them in the shop’s cookie notice. Change your mind at any time with the “Cookie choices” link at the foot of every shop page, and turn off sharing for advertising on the shop’s privacy choices page.

Your rights

The same as for trigpoint.app: ask for a copy, a correction, deletion, or for us to stop emailing you, by writing to support@trigpoint.app. For an order you have placed, we keep the tax records for six years and cannot delete those. Complaints go to the Information Commissioner’s Office at ico.org.uk. If you live in a US state with its own privacy law, you have similar rights to know, correct and delete your data, and to opt out of targeted advertising.

Cancelling and returns

In the UK you can cancel log books and prints that are not personalised within 14 days of receiving them, for any reason, and we refund the price and standard delivery. Personalised posters are made to your details and cannot be returned unless faulty. In the US, because each item is printed to order, we cannot take it back if you change your mind, unless the law where you live gives you that right. Anything faulty, damaged or misprinted is replaced or refunded in full, wherever you are. The full terms are on the shop’s delivery and returns page. None of this affects your legal rights.

Maps and data in the books

The books and prints use Ordnance Survey open data, the Database of British and Irish Hills and, in some, data from OpenStreetMap contributors. Each book credits its sources in its front or back matter, the shop credits them at the foot of every page, and the licences for the first two are set out in full below. Trig. is not affiliated with Ordnance Survey, and the books are not navigation aids.

These terms are between you and Harbour Labs Digital Ltd (company number 17200663), which runs Trig. By creating an account you agree to them.

The register

The register of pillars and hills is free to browse and always will be. It is built from a discontinued Ordnance Survey archive, the Database of British and Irish Hills, and what members report. Treat any single entry as a strong indication, not a guarantee. It is not a navigation aid: check access, the ground and the weather yourself, especially near cliffs, quarries and working farmland, and respect private land.

Your account

Keep your password to yourself; you are responsible for what is recorded under your account. Record visits you actually made. We may close an account that is used to abuse the site or other members, and will tell you why.

What you add

Your condition reports and photographs stay yours. You let us store them and show them as this page describes, for as long as your account exists. Do not upload anything you do not have the right to share, and keep other people’s faces out of pillar photographs.

A photo you share is a new copy with its location and camera details removed, shown on that pillar’s page with its date and condition, and credited with your display name if you have set one, otherwise “a member”. Unsharing it, deleting the photo or deleting your account removes the public copy. Anyone signed in can report a shared photo, and we may hide one that breaks these rules.

The paid plan

• The full record costs £30 a year or £3.50 a month, and renews automatically until you cancel. Harbour Labs Digital Ltd is not registered for VAT, so no VAT is added.
• Cancel at any time from your account page. You keep the paid features until the end of the period you have paid for, and are not charged again.
• You can cancel within 14 days of first subscribing for a refund. Because the paid features start straight away, a refund in that time is reduced for the days already used.
• Badges you have earned are yours to keep after you cancel. Uploading GPX files needs an active plan; ticking pillars and hills by hand is free and unlimited.
• If prices change, we will email you at least 30 days before your next renewal, and you can cancel before it applies.

If something goes wrong

We work to keep Trig. running and your record safe, but cannot promise it will always be available or free of errors. Nothing in these terms limits rights you have by law as a consumer, or liability for anything that cannot legally be limited.

The law

These terms are governed by the law of England and Wales. If you live in Scotland or Northern Ireland you can also bring a claim in your own courts.