Privacy policy

What we collect

From Google. Signing in with Google gives us your name, email address and profile picture. That is the whole of it — we ask Google only for your basic profile and email, and we use it to identify your account and show who you are on club leaderboards. We do not read your Gmail, contacts, files or calendar.

What you enter. The shoots you log — date, discipline, course of fire, scores and per-stage detail, and the optional location and notes fields — along with the firearms and ammunition lots you record, the clubs you join, and any match events or head-to-head challenges you take part in.

Photos. Target cards you photograph are uploaded to private object storage. They are never public: the app hands your browser a short-lived signed link each time one is displayed. Both the original photo and the flattened version produced by the scorer are kept, so a score can be re-checked against the card it came from.

Technical. A session cookie to keep you signed in, and ordinary server logs.

Who can see it

Your shoots are private to you by default. They become visible to other people only where the feature plainly implies it: club leaderboards and records boards for clubs you join, and head-to-head challenges you enter. In those places other members see your name, profile picture and the relevant scores — not your notes, photos or equipment.

Leaving a club stops your scores appearing on its boards from that point.

Who processes it

The app, its database and its photo storage run on Railway. Sign-in is handled by Google. Those two providers process your data on our behalf so the app can run.

We do not sell your data, we do not share it with advertisers, and there is no advertising or third-party analytics in the app.

How long we keep it

Your data stays until you delete it or ask us to close your account. Deleting a shoot deletes its stages, scoring jobs and photos with it. Email us to have the whole account and everything in it removed, and we will action it within 30 days.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by emailing the address above. We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). If you are unhappy with how we have handled a request, you can complain to the Office of the Australian Information Commissioner.

Security

Photo storage is private with no public URLs, and credentials for it are held only by the server. Traffic is served over HTTPS. No system is perfectly secure, and we cannot guarantee absolute security — but we do not store passwords at all, because sign-in is delegated to Google.

Changes

If this policy changes we will update this page and the date at the top of it. Material changes will be flagged in the app.