PlanetHike Unified Privacy & Cookies Policy

Effective Date: 20-11-2025
Last Updated: 20-11-2025

PlanetHike OÜ (“PlanetHike,” “we,” “us,” or “our”), registered in Tallinn, Estonia, is committed to protecting your privacy and handling your personal data with transparency and care. This Privacy & Cookies Policy explains what data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and your rights regarding your personal data and cookie preferences.

PlanetHike OÜ acts as the Data Controller for all personal data processed through our website and services.

1. What Personal Data We Collect and Why

We collect only the data required to operate PlanetHike, provide participation access, deliver merchandise, issue RegreenityCoins, ensure fairness, and enhance our services.

1.1 Account & Registration Data

Data Collected: Name, email, password (hashed), country. For minors: parent/guardian name, email, phone. For organizations: team captain details, organization name/address. Purpose: Account creation, secure login, communication, team management. Legal Basis: Contract performance, legitimate interests (platform security).

1.2 Participation & Activity Data

Data Collected: Step submissions (date + count), RegreenityCoin balance, milestones, event history. Purpose: Manage participation, verify activity, award Coins, track global goals. Legal Basis: Contract performance, legitimate interests (fraud prevention).

1.3 Payment & Transaction Data

Data Collected: Plan selected, transaction ID, payment status (processed via third‑party providers; full card details never stored). Purpose: Process payments, issue registrations, accounting and tax compliance. Legal Basis: Contract performance, legal obligations.

1.4 Merchandise Orders

Data Collected: Item selected, size, shipping address, phone number. Purpose: Fulfillment and delivery. Legal Basis: Contract performance.

1.5 Comments & Interactive Features

Data Collected: Name, comment content, IP address, browser agent; Gravatar hash if used. Purpose: Public commenting, spam detection. Legal Basis: Legitimate interests.

1.6 Media Uploads

Users should avoid uploading images containing EXIF location data. Legal Basis: Consent.

1.7 Contact Forms

Data Collected: Name, email, message content. Purpose: Responding to inquiries. Legal Basis: Legitimate interests.

1.8 Cookies & Tracking

We use cookies for site functionality, analytics, preferences, and (when consented) marketing.

Types of Cookies:

• Essential — login sessions, security, payment processing. (Legal basis: legitimate interests)

• Analytics — anonymized traffic patterns, page behavior. (Legal basis: consent)

• Functionality — remembering preferences. (Legal basis: consent)

• Marketing — relevant advertising where accepted. (Legal basis: consent)

• Embedded Content Cookies — from YouTube, Instagram, etc. (Legal basis: consent)

Examples: ph_session, ph_cookie_consent, wordpress_logged_in_*, _ga, __stripe_sid.

1.9 Embedded Content

Embedded videos, maps, or posts behave as if visited directly on external platforms.

1.10 Aggregated Analytics

Non‑identifiable statistics such as total participants, steps collected, or Coin distributions.

2. How We Use Personal Data

We use your data to:

• Operate and maintain the PlanetHike platform.

• Register participants and teams.

• Track steps, verify participation, assign RegreenityCoins.

• Process payments and deliver merchandise.

• Communicate confirmations, updates, alerts.

• Detect fraud, ensure fairness, and protect platform integrity.

• Analyze usage and improve services.

• Provide optional marketing messages if consented.

• Report anonymized environmental impact.

• Comply with legal obligations.

3. Who We Share Data With

We never sell your personal data. We share it only when necessary to provide our services.

3.1 Service Providers

• Payment processors (e.g., Stripe, PayPal)

• Merchandise/fulfillment partners

• Email communication providers

• Hosting & IT infrastructure partners

• Analytics services (e.g., Google Analytics)

• Spam detection systems

3.2 Organizational Participation

If you join PlanetHike via a school, company, or organization using a Team Code, we may share your name and verified activity totals with your Team Captain.

3.3 Legal Requirements

We share data if required by law or valid regulatory request.

3.4 Business Transactions

If PlanetHike OÜ undergoes a merger, acquisition, or restructuring, data may transfer accordingly.

3.5 Consent-Based Sharing

We share data with third parties only where you have explicitly consented.