Privacy policy

§ 1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Meister Digital Growth
Holzschuherring 18a
91058 Erlangen
Email: [email protected]

§ 2 Principle

We process personal data exclusively on the basis of the General Data Protection Regulation (GDPR), the Bavarian Data Protection Act (BayDSG) and the Federal Data Protection Act (BDSG). Personal data means any information relating to an identified or identifiable natural person.

§ 3 Cookies and local storage

Our application uses no cookies. Information is, however, stored in the local storage (localStorage) of the browser:

• auth_token: The authentication token, used to identify the logged-in user uniquely after login. It is deleted again on logout.
• theme: The selected appearance (Dracula dark theme).
• cookie_consent: The decision made in the cookie banner that is displayed.

§ 4 Server log files

When our pages are requested, your web browser and our web hosting service automatically transmit log data to our server (time of the request, IP address, browser type and version, operating system used, referrer URL and similar connection details). This data serves to ensure functionality, analyse errors and keep the network secure; it is stored only temporarily.

§ 5 Data collected and purposes

5.1 Check-ins

When you use the check-in form, the following details for the climbing area or gym are recorded and permanently linked to the user account:

• Type of location (indoor or outdoor),
• Slug and name of the location,
• Date of the visit,
• free-form notes on the visit,
• overall rating of the climbing session (1–5 stars),
• kid-friendliness rating (1–5 stars).

These details are used to calculate the respective independent averages, which are shown anonymously on the location maps.

5.2 Comments

When a comment is submitted, the comment text, the user account and the associated profile link are stored permanently.

5.3 Profile

To personalise your profile, the following data may be recorded: short biography (bio), climbing level, avatar image and uploaded profile photos.

5.4 Registration and login

Using personalised features requires registering with an email address and a password of your own choosing. The email address serves as your username. When you log in with GitHub, the authentication token from your GitHub account is used as well.

§ 6 Disclosure to third parties

Personal data is not disclosed to third parties in principle, unless it is required to perform a contract, you have consented, or disclosure is permitted under statutory provisions.

§ 7 Security measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or tampering. Transport between the frontend and the API uses HTTPS.

§ 8 Retention period

Personal data is stored only as long as it is necessary for the respective purposes or as long as statutory retention duties apply. Unless legal requirements dictate otherwise, data is deleted after 30 days without active use.

§ 9 Your rights

You have the right to:

• access to your personal data,
• rectification of inaccurate data,
• erasure of the data or restriction of processing,
• objection to processing,
• data portability;
• withdrawing any consent you have given.

To exercise these rights, please contact the address given in § 1.

A complaint may be filed with the Bavarian Data Protection Authority (BayLDA).

§ 10 Affiliate links

The gear page shows products through affiliate links. If you click such a link and subsequently place an order, we may receive a commission, at no extra cost to you.

§ 11 Changes to this privacy policy

We reserve the right to amend this privacy policy. Changes take effect when published on our site.