Privacy and terms · Greater Munnar
What we keep, what is public, and how to take it down.
This page says what Cleartrail does with your data, as the code does it today. Cleartrail is a public litter map, so what you report is public. Who you are never is.
Last changed 13 Nov 2026
Who runs it
Cleartrail is a public litter map for the Greater Munnar pilot. Questions about your data go to privacy@cleartrailmunnar.org.
What we store
The tag under each says who can see it.
Your email address
Kept for anyone who signs in, with your role: reporter, auditor or admin. The sign-in link and any answer to an application are emailed to it.
You and the ownerSign-in links
The email address the link was sent to, a scrambled (hashed) copy of the link, a scrambled copy of the network address that asked, the page you were heading for, and when the link was made and opened. The link itself is not stored, so a copy of our records cannot sign anyone in.
Owner onlySessions
One row for each device you are signed in on: a scrambled copy of the code in your session cookie, who you are, and when it began, runs out or ended.
Owner onlyReports
What you saw, where you placed the pin, how much, your note, the photos, when it was sent, and who sent it.
Public, but never whoAudits
The counts, conditions and note of an audit, its segment, the day it was counted, its photos, and the auditor who sent it.
Public, but never whoCleanups
The segment, the day, the group name as typed, how many people and bags, a note, the before and after photos, and who recorded it.
Public, but never whoCleanup requests
That someone signed in asked for a cleanup on a segment, and when.
Public, but never whoApplications
What you write when you apply to become an auditor or to add a partner: your reason, the routes you can reach, the organisation’s name and kind, and the owner’s decision.
You and the ownerPartner contacts
How the owner reaches a partner: an email address or a phone number, if given. A partner’s name and description are public only after the partner agrees to be named.
Owner only
A network address in a sign-in link’s row, and the tag audit mode keeps from your email, are stored as one-way hashes. A hash hides them from a glance. It is not encryption, and someone who holds our records and is determined could still test a guess against it.
What is public, and what never is
Public
- Reports, audits and cleanups: their category, counts, notes, photos, dates, the position of each report’s pin, and the group name of a cleanup as typed.
- The open data files on the Data page, which hold the same.
- A partner’s name, only once it has agreed to be named.
Never shown publicly
- Who sent a report, who counted an audit, who recorded a cleanup, and who asked for one.
- Email addresses.
- Photo originals.
- Application details.
- Partner contacts.
A note is shown exactly as you write it, and so are a pin’s position and a cleanup’s group name. Leave out names and phone numbers, do not type a person’s name as a group name, and do not put a pin on a home.
What happens to a photo
The original is kept privately and never shown. What is shown is a new image made from it: turned upright, shrunk to at most 1,600 pixels on its long side, and saved as WebP. A new file carries only pixels, so the GPS position, camera, time, comments and profiles in the original are left behind, and the code checks that none remain before a copy is published. Faces and number plates in the picture itself are not removed.
Photos leave your phone only when you tap send. If sending a report, audit or cleanup stops partway and is never finished, any photos already uploaded stay stored privately, and their public copy can still be reached by its address, until it is taken down.
How long we keep it
A sign-in link works
Once only. After that it is of no use.
You stay signed in
On each device, until you sign out or the time runs out.
Old sign-in records go
A sign-in link’s row is removed once it is more than 1 day old, and a session’s row once it has been over for more than 1 day. This happens whenever the next link is asked for or the next person signs in.
Everything else is kept with no end date: your email address, reports, audits, cleanups, requests, applications and photos. A takedown takes something off every public page and download, but a private record of it stays, and so does the original of any photo.
Taking something down
Anyone can ask for a report, a photo or a cleanup to come down. Write to privacy@cleartrailmunnar.org and say which one: a link to its page or its photo is enough. The owner can take anything public down, and does it by hand.
privacy@cleartrailmunnar.orgA takedown removes it from the map, from every public page and from the open data files. A photo’s public copy is removed and stops loading within minutes.
Files someone has already downloaded under the licence cannot be called back.
Data licence
The public data is open. Use it freely and credit “Cleartrail Munnar”.
The files and their column dictionary are on the Data page.
Map imagery and roads are credited as in the footer: Imagery: Sentinel-2 cloudless by EOX IT Services GmbH, under the Creative Commons Attribution 4.0 International License. Contains modified Copernicus Sentinel data 2016. Cleartrail regraded the colour and added relief shading. s2maps.eu CC BY 4.0 Elevation: Mapzen terrain tiles. Global GMTED2010 and SRTM terrain data courtesy of the U.S. Geological Survey. Terrain tile sources Roads: © OpenStreetMap contributors, under the Open Database License. openstreetmap.org/copyright
Cookies and your device
The app sets two cookies; Cloudflare may set its own for security. Cleartrail has no advertising, no analytics and no tracking.
Also on your device, not in a cookie
The words of a report or audit you have started are kept in your browser for up to 24 hours, so signing in does not lose them. After that they are removed the next time the page opens. They are also removed when the report or audit is sent, discarded or replaced by a new one, and an audit draft when you sign out. Their photos are kept in your browser beside them and removed at the same moments. Audit mode also keeps audits waiting for signal until they are sent, pages saved so it opens with no signal, and a tag that is a one-way scramble of your email, never the email. It forgets the tag when you sign out.
Services we use
Cloudflare, and the bot check
Signing in includes a check run by Cloudflare Turnstile to keep bots out. Your browser loads it from Cloudflare, and our server sends Cloudflare the check’s result and your network address to confirm it. The site is also served through Cloudflare. Cloudflare handles all of this under its own privacy policy: cloudflare.com/privacypolicy.
Email, through Resend
Sign-in links, and the owner’s answers to applications, are sent through Resend. Resend receives the recipient’s address and the text of each message in order to deliver it.
Changes
Last changed 13 Nov 2026. When this page changes, that date changes with it.