Privacy Policy
Last updated: September 2026
We take your privacy seriously. This policy explains what information we collect, why we collect it, how it is used, and your rights under the General Data Protection Regulation (GDPR / UK GDPR) and the California Consumer Privacy Act (CCPA / CPRA).
Our core database servers are hosted within the European Union.
1. Information We Collect
A. Public Climbing Beta & Directory Submissions
When you submit a climb or review, we store the route name, UKC link, location, star rating, optional height, and beta comments. These submissions are public. Do not include private personal details in your public review text.
B. Coaching & Contact Form Inquiries
When you submit an enquiry through our coaching form, we collect your name, email address, optional phone number, height/ape index, and message. This information is treated strictly as private correspondence to respond to your request.
C. Technical & Security Logs (IP Addresses)
When you access the website or make a submission, automated network logs may temporarily record your Internet Protocol (IP) address, browser user-agent, and request timestamps.
2. Legal Bases for Processing (GDPR / UK GDPR)
We process personal data under the following legal frameworks:
- Legitimate Interests (Art. 6(1)(f) GDPR): Logging IP addresses and basic request metadata strictly for network security, rate-limiting, and spam prevention.
- Consent & Pre-Contractual Steps (Art. 6(1)(a) & (b) GDPR): Processing the name, email, and climbing details you submit via the Coaching enquiry form to respond to your request.
- Consent for Public Contributions: Processing and publishing community climbing reviews you voluntarily choose to submit.
3. Third-Party Service Providers
We use reputable infrastructure providers to operate the service:
- Supabase: Database hosting (located in the EU).
- Web3Forms: Encrypted routing of coaching enquiry emails to our inbox.
- Country.is: Anonymous IP-to-country lookup API (no personal logs retained by us).
- OpenStreetMap / Leaflet: Tile serving for open mapping (requests made directly to OpenStreetMap).
We do not sell, rent, trade, or share your personal identification data (such as your email or IP address) with third-party data brokers or marketing agencies.
4. Local Storage & Cookies
We do not use advertising, marketing, or tracking cookies. We utilize your browser's localStorage strictly for functional UI preferences (such as remembering whether you prefer Metric vs. Imperial measurements and your chosen climbing grade system).
5. Notice to California Residents (CCPA / CPRA)
Under California law, California residents have the right to know what personal information is collected, request its deletion, and not be discriminated against for exercising privacy rights.
We do not "sell" or "share" personal information (like names, emails, or IP addresses) as those terms are defined under the CCPA/CPRA.
6. Your Rights & Data Removal Requests
Under GDPR, UK GDPR, and applicable privacy laws, you have the right to request access to, rectification of, or permanent erasure of personal data we hold about you.
If you submitted a coaching enquiry or a review containing personal information that you wish to have updated or permanently deleted, contact us through our contact form with your request and route reference, and we will fulfill it promptly.