Privacy policy
Placeholder text — have this reviewed by legal counsel before publishing.
What we collect
Account and profile data (name, username, email), content you create in the app (game, weapons, hunting grounds, sightings, harvested game, notes), and technical data such as your location for map features, only when you actively use them.
How we use it
Solely to provide the app's functionality (account management, cross-device sync, map display, reporting). We never share it for advertising purposes.
Recipients and service providers
To run the app we share data with carefully selected service providers: hosting and database (IONOS, Germany), payment processing for premium subscriptions (Stripe), email delivery (Resend), handling of support requests (GitHub), and analytics (Google Analytics, only with your consent). When a map is shown, your device loads map tiles directly from OpenStreetMap and Esri, which transmits your IP address to them. Address search (Nominatim) and weather data (Open-Meteo, OpenWeatherMap) are requested from our servers, so your IP address does not leave our infrastructure. If you sign in with Google, Apple or Microsoft, that provider learns about the sign-in. Push notifications are delivered by your browser's push service. Some of these providers process data outside the EU; those transfers rely on an adequacy decision or standard contractual clauses. We will provide a complete, current list on request via support.
Analytics
With your consent, we use Google Analytics (GA4) to understand how the app is used, so we can improve it. Google may process this data outside the EU. Analytics only runs if you accept it in the cookie banner, and you can withdraw consent anytime via "Cookie settings" below. The same consent also enables technical performance monitoring (OpenTelemetry), which records the page addresses you visit and how long they take to load.
Storage
Your data is stored on servers in the EU for as long as your account exists. Your access token is kept locally in your browser; the refresh token lives in an httpOnly cookie.
Your rights
Under GDPR you have the right to access, correct, and delete your data. Contact support to exercise these rights.
Deleting your account
You can permanently delete your account at any time from Account settings under "Danger zone". Your personal data is anonymized, and you are signed out immediately.
Contact
For any privacy questions, reach us through the Support section in Account settings.