Privacy policy

Information we collect

Depending on the features you use, we may process:

• Account data: email address, account identifier, name and profile image. Sign-in credentials are handled by Clerk, our authentication provider.
• Climbing activity you choose to record: ascents, route and crag references, dates, grades, style, attempts, ratings and comments.
• Saved content and planning data: crags or sectors you favorite, trip names, selected stops, stop labels and coordinates, and trip preferences.
• Preferences and safety settings you provide, which may include an emergency contact number.
• Location data: when you grant foreground location permission and use location-based features, the app reads your current or recent device location to center the map and find nearby climbing areas. Coordinates or map viewport bounds are sent to our API to return relevant results. The app does not request background location access.
• Technical and usage data: app version, operating system and device diagnostics, service requests and security logs. If crash reporting is enabled for a build, Sentry may receive crash reports and related technical diagnostics.
• Website analytics: if enabled, Google Analytics may receive pseudonymous usage data such as pages visited, approximate location, device information and interactions. Analytics cookies or similar technologies may be used depending on your browser settings.

How we use information

We use this information to authenticate accounts, provide maps and climbing-area search, store and display your climbing log, favorites and trips, synchronize settings, maintain and secure the service, diagnose errors, and respond to support or privacy requests.

We do not sell personal data or use it to serve third-party advertising.

Location and permissions

Location access is optional and controlled by your device settings. You can deny or revoke it at any time; location-dependent features may then be unavailable. Location is used while you use the relevant feature, not to track you in the background.

Sharing and service providers

We share data only as needed to operate the service, at your direction, or when legally required. Service providers process data for the purposes described here and under their own privacy terms:

• Clerk provides account authentication and processes account identifiers and sign-in information.
• Our API, database and website hosting providers store and process account and app data to deliver crag.guide.
• OpenFreeMap, OpenMapTiles and OpenStreetMap provide map styles or map data. Loading maps may disclose your IP address and the requested map area to those providers.
• Sentry may process crash and diagnostic data when crash reporting is enabled for the app build.
• Google Analytics may process website usage data when analytics is enabled.
• Google Play distributes the Android app and handles store-related data under Google’s terms and privacy policy.

Retention and deletion

We retain account and climbing data while needed to provide the service and for legitimate operational, security or legal purposes. You may request access, correction or deletion by emailing us. We will process verified requests and remove or anonymize data we no longer need, subject to legal obligations and limited backup or security retention.

Security and international processing

We use reasonable technical and organizational safeguards to protect data. No internet transmission or storage system can be guaranteed completely secure. Our providers may process information in countries other than yours, subject to applicable safeguards and laws.

Your choices and rights

You can manage location permission in your device settings and update app preferences in the app. Depending on where you live, you may also have rights to access, correct, delete, restrict or object to processing of your personal data, and to receive a copy of it. Contact us to exercise these rights.

Children

crag.guide is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us so we can address it.

Changes to this policy

We may update this policy when our practices or legal requirements change. We will post the updated version on this page and revise the date above.

Contact

For questions and privacy requests, email us at:

To request account deletion, use the account deletion page.