Privacy Policy
Last updated: September 2026
We take your privacy seriously. This policy explains what information we collect, why we collect it, how it is used, and your rights under the General Data Protection Regulation (GDPR / UK GDPR) and the California Consumer Privacy Act (CCPA / CPRA).
Our core database servers are hosted within the European Union.
1. Information We Collect
A. Account Registration & Contributor Authentication
When you create an account to contribute climb ratings and beta, we collect your email address and a secure hashed representation of your password. We do not store your raw password; passwords are cryptographically hashed and salted using industry-standard protocols. Your email address is strictly used to authenticate your session, protect against automated spam submissions, and associate you with your contributions.
B. Public Climbing Beta & Directory Submissions
When you submit a climb or review, we store the route name, UKC link, location, star rating, optional height, and beta comments. These submissions are public. Do not include private personal details in your public review text. Your registered email address is never made public alongside your reviews.
C. Coaching & Contact Form Inquiries
When you submit an enquiry through our coaching form, we collect your name, email address, optional phone number, height/ape index, and message. This information is treated strictly as private correspondence to respond to your request.
D. Technical & Security Logs (IP Addresses)
When you access the website or make a submission, automated network logs may temporarily record your Internet Protocol (IP) address, browser user-agent, and request timestamps to ensure infrastructure security and prevent rate-abuse.
2. Legal Bases for Processing (GDPR / UK GDPR)
We process personal data under the following legal frameworks:
- Performance of Contract & Pre-Contractual Steps (Art. 6(1)(b) GDPR):Creating and maintaining your contributor account, authenticating login sessions, and processing coaching inquiries you submit.
- Legitimate Interests (Art. 6(1)(f) GDPR):Securing our platform against bots, abuse, spam submissions, and unauthorized data scraping through IP logging and rate limits.
- Consent for Public Contributions (Art. 6(1)(a) GDPR):Storing and publishing community climbing reviews, grades, and beta that you voluntarily choose to submit.
3. Third-Party Service Providers
We use reputable infrastructure providers to operate the service:
- Supabase: Database and user authentication hosting (servers located in the EU).
- Web3Forms: Encrypted routing of coaching enquiry emails to our inbox.
- Country.is: Anonymous IP-to-country lookup API (no personal logs retained by us).
- OpenStreetMap / Leaflet: Tile serving for open mapping (requests made directly to OpenStreetMap).
We do not sell, rent, trade, or share your personal identification data (such as your email or IP address) with third-party data brokers, advertisers, or marketing agencies.
4. Local Storage & Authentication Session
We do not use tracking or third-party marketing cookies. We utilize your browser's localStorage strictly for:
- Functional Preferences: Remembering UI preferences (e.g. Metric vs. Imperial units, selected climbing grade system).
- Authentication Sessions: Securely keeping you signed in via encrypted session tokens while you navigate the directory. These tokens are strictly necessary for service delivery and authentication.
5. Notice to California Residents (CCPA / CPRA)
Under California law, California residents have the right to know what personal information is collected, request its deletion, and not be discriminated against for exercising privacy rights.
We do not "sell" or "share" personal information (like names, emails, or IP addresses) as those terms are defined under the CCPA/CPRA.
6. Your Rights & Data Removal Requests
Under GDPR, UK GDPR, and applicable privacy laws, you have the right to request access to, rectification of, or permanent erasure of personal data we hold about you (including your account credentials and email).
If you wish to delete your contributor account, coaching enquiry, or a submitted review, contact us through our contact form from your registered email address, and we will fulfill your request promptly.