Corridor · last updated 1 September 2026
The app has no account, no sign-in, no analytics, and no server running code I wrote. Almost everything the app knows about you stays on your phone: where you are, where you have walked, where you slept, what you have planned. None of it is ever sent anywhere.
This website is a different thing, and it does count its visitors. That is new as of today and there is a section on it below. Nothing joins the two: the site learns nothing about your phone, and the app sends nothing here.
One thing you can choose to share: a comment about a place. If you write one, it goes to Apple’s iCloud so other hikers can read it. That is the only thing this app ever sends, and only when you type it and press Post.
Every waypoint has a place to write a note for the next hiker — the tank is dry, the door sticks, the creek below is running. Writing one is entirely optional and the app is complete without it.
If you write one, these things are stored in Apple’s iCloud and are public: what you wrote, when you wrote it, which place it is about, and the trail name you chose if you chose one. Your comment is signed anonymous if you did not.
I never learn who you are. There is no sign-up and nothing to fill in. iCloud identifies you to the app by an opaque code that is different for every app you use and cannot be turned back into a person — not by me and not by anyone else. I never receive your name, your email address, your phone number or your Apple Account.
You can delete any comment you have written, at any time, from the place it is about. You can delete all of them at once in Settings. You can hide any other hiker’s comments by blocking them, and report anything that should not be there — three reports remove a comment from every phone.
Everything you write is checked on your own phone before it is sent, by Apple’s on-device model. That check happens on the phone and the text is not sent anywhere to perform it.
If you never write a comment, nothing about you is stored in iCloud by this app at all. Reading what other people wrote sends nothing.
The app asks for your location so it can show where you are on the trail, measure how far you have walked, and warn you about water sources ahead. That location is read on the phone, used on the phone, and stored on the phone. It is never transmitted, never logged off the device, and never shared with anyone — including me.
You can refuse the permission or withdraw it at any time in iOS Settings. The app still works; it simply cannot draw where you are.
All of it lives inside the app's own storage and is deleted when you delete the app.
Two things cross the network, to two different places.
Apple’s own handling of iCloud data is covered by Apple’s privacy policy, and Cloudflare’s by Cloudflare’s.
corridor-trails.com counts its visitors; the app does not. I write this on my own, for hikers, and the only way I can tell whether a page here is doing its job is to look at whether anybody reads it.
The site uses PostHog, on servers in the European Union, to record which pages are opened, how long they stay open, what is clicked, and roughly which country the request came from — worked out from your IP address, which is not kept beside the result. It also keeps a replay of a visit: a reconstruction of what moved on the page, rebuilt from the events your browser fired rather than from anything read off your screen. Anything typed into a field is masked before it leaves the browser, and there is no field on this site worth typing into anyway.
This needs a cookie, and the honest reason is that without one every page you open counts as a new stranger and how long did somebody stay cannot be answered at all. The cookie holds a random code and nothing else. It is not shared, not sold, and never used for advertising.
Those requests do not go straight to PostHog. They go to e.corridor-trails.com, a
subdomain of this site, and on to PostHog from there — because a browser extension that
blocks posthog.com by name otherwise deletes a fifth of the numbers without telling
anybody. That routing is done by Cloudflare,
who already hand out the map packs the app downloads.
If your browser sends Do Not Track, none of it runs. Blocking the script blocks all of it too, and the site works exactly the same either way.
In the app there are none. No advertising, no tracking, no crash reporting, no third-party SDKs of any kind. On this website there is one, and it is PostHog, described above.
Corridor is rated 13+ because it lets hikers write notes other hikers can read. Nothing about you is collected unless you write one.
If this policy ever changes, the date at the top of this page changes with it.
Questions about privacy, or something in a comment that should not be there: beiserjohannes@gmail.com
Licensing & attribution — every source the map is built from, and what each one asks to be called.