How Trail Rewards handles your data
Last updated 31 July 2026.
Trail Rewards is operated by The Smart Funnel, based in the United Kingdom. This policy explains what personal data we handle, why, and what your rights are. Questions any time: laurenthesmartfunnel@gmail.com.
The short version
- If you run an attraction, we hold your account email and settings — nothing more than the service needs.
- If you claimed a reward on a trail, we never store your email address. It is used once, in the moment, to add you to the attraction's own mailing list with your consent — then it is gone from our systems. Your reward itself is shown to you on screen, not emailed.
- No advertising trackers, no analytics cookies, no selling of data. Ever.
If you run an attraction (account holders)
When you create a Trail Rewards account we collect and hold:
- Your email address and password. The password is stored only as a secure one-way hash — we cannot read it.
- Your attraction's details. Name, logo, brand colours, sender name and reply-to address, and your campaign settings (keywords, prizes, offer text).
- Your email platform connection. If you connect a platform such as MailerLite, the API key you provide is stored encrypted at rest and used only to add your visitors' signups to your list.
We use this data to run the service and to contact you about your account. We keep it while your account is open. Close your account, or ask us to, and we delete it.
If you claimed a reward on a trail (visitors)
When you finish a trail and enter your email on the claim page, your reward is shown to you on screen straight away. With your consent, one more thing happens:
- Your email address is passed directly to the email platform the attraction uses for its own mailing list.
We do not keep your email address. Our platform stores only a one-way cryptographic fingerprint of it — enough to remember which prize you won and to stop duplicate claims, but mathematically impossible to turn back into your address. If you asked us "what is this visitor's email?", we genuinely could not answer.
The attraction you visited is the data controller for its mailing list. To unsubscribe, use the unsubscribe link in any of its emails, or contact the attraction directly. The Smart Funnel acts only as a processor passing your address through at the moment you consent.
The claim form should be completed by a parent or guardian, not by children.
Security and abuse-prevention data
To protect trails from keyword guessing, we record scan and claim events with a truncated, salted hash of the visiting device's IP address. This is used only for short-term rate limiting and campaign statistics, and cannot identify you.
Who we share data with
- The attraction's email platform (for example MailerLite) — receives visitor signups at the attraction's direction, with the visitor's consent.
- Our hosting provider — runs the servers this platform lives on.
We never sell or rent personal data, and we never share it for advertising.
Cookies
Logged-in account holders get one session cookie so the dashboard knows who you are. That's it. The visitor claim pages set no cookies at all, and no page on Trail Rewards uses analytics or advertising trackers.
Your rights
Under UK GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it, delete it, or restrict how we use it. Email laurenthesmartfunnel@gmail.com and we will respond promptly. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this policy we will update this page and the date at the top. Significant changes affecting account holders will be emailed to you.