Privacy Policy

1. Who we are

Bouldr is a community platform for climbers. Our contact for privacy matters is [email protected].

Placeholder: Final policy is subject to counsel review before launch.

2. Data we collect

We collect the data you provide: your email address (from Google sign-in), display name, handle, bio, home area, climbing interests, and the content you post. We also collect session tokens (stored as hashed values), hashed IP addresses for rate limiting and security, and aggregate cookieless analytics.

3. How we use your data

To provide the service, prevent abuse, respond to safety reports, and comply with legal obligations. We do not sell your data or use advertising trackers.

4. Cookies and tracking

We use one strictly necessary first-party session cookie (__Host-spotter.session). We also store your theme preference in localStorage. We do not use advertising or analytics cookies. No consent banner is shown because we set only strictly necessary cookies.

5. Your rights

You have the right to access, correct, export, or delete your personal data. Export and deletion are available in your account settings. For other requests, email [email protected].

6. Data retention

Account data is held for the life of your account. After deletion, your data is purged within 30 days. Content you posted may be anonymised rather than deleted in order to preserve thread integrity. Consents and copyright notices are kept for 3 years. Aggregate analytics data does not expire.

7. Where data is stored

Data is stored in the European Union (Frankfurt region). Our processors are Fly.io, Neon, Cloudflare, Sentry, and Google (sign-in only). Each has a data processing agreement in place.

8. Contact and complaints

Privacy queries: [email protected]. You also have the right to lodge a complaint with your local data protection authority.