Privacy policy

1.Who we are

Crag Tools is run by Androw, an individual based in Paris, France, who is responsible for your data. For any privacy question or request, write to ct [at] androw [dot] eu.

2.What we store

Account: your email address, a salted hash of your password (never the password itself), and your settings: default session length and, if you enter it, your body weight.

TendonGuard sessions: date, type, duration, effort (RPE), and the optional finger soreness and notes. HangTimer workouts: the name, timings and added weight of each workout you save.

InCondition: your favourite crags, the crags you add, the edits you suggest with their comment, and your yes/no answers on whether a crag was in condition on a given day.

Without an account, everything you log stays in your browser and never reaches our server. Creating an account imports it.

3.Health data

Finger soreness, effort, body weight and session notes can reveal information about your health. We store them only because you enter them, use them only to compute the estimates shown to you, and never share them.

Entering them is optional. By logging them you give your explicit consent to this processing (GDPR Art. 9(2)(a)). You can withdraw it at any time by deleting the sessions or your account.

4.Why we use it

We use account and crag data to provide the service you signed up for (GDPR Art. 6(1)(b)), and health-related data on your consent (above). We don't sell your data, show ads, or use it for marketing or profiling.

5.Cookies and local storage

We only set the cookies the app needs to work, so there is no consent banner: ctools_session keeps you signed in (30 days), locale remembers your language and tz your time zone (1 year each).

Your browser's local storage holds guest data and the changes waiting to sync while you're offline. Page-view statistics are aggregated and cookieless.

6.Who else sees it

Your data is kept by our hosting and database providers, who process it only on our behalf. Password-reset emails go through our email provider. The weather service receives only crag coordinates, never anything about you. Admins see the email of a pending crag edit's author.

7.How long we keep it

We keep your data as long as your account exists. Deleting your account immediately erases it: profile, sessions, HangTimer workouts, favourites, condition answers, settings and reset links.

Crags you added stay published (they're released under CC0) but are no longer linked to you. Edits you suggested stay in the moderation log without your email. Password-reset links expire after 60 minutes.

8.Your rights

You can access your data and take it with you (download it from your account settings), correct it (edit your sessions and account), erase it (delete sessions or the whole account) and withdraw your consent at any time.

For anything else, or to object to a use of your data, write to ct [at] androw [dot] eu. You can also complain to your data-protection authority — in France, the CNIL.