Privacy policy

What we process

• Account: email address, password hash (managed by Supabase Auth), username, name, optional avatar, optional phone number, and – for Pro – bio, hunting club and licence number. The language you use the app in, so notifications reach you in it.
• Live position: latitude, longitude, accuracy, heading and speed — only while you have tapped “Start hunt”. Ending the hunt deletes the live position. Closing or hiding the app marks you offline; your last position stays visible as “last seen” to the people listed below for up to 30 minutes and is deleted after 12 hours at the latest. Starting a new hunt clears it first.
• Party data: memberships, chat messages, horn signals and acknowledgements, SOS alerts with position, shot markers with position, zones drawn by admins, harvest plans.
• Friends: friend requests and friendships, and for each friend whether you share your live position with them.
• Hunting log: species, sex, weight, weapon, location, notes and photos you enter. Private by default; you choose per entry whether it appears on your public profile or in a party.
• Drückjagd tracks: only if you opt in per drive, breadcrumbs are stored for the debrief.
• Push subscriptions: the endpoint your browser issues so we can deliver notifications.
• Billing: Stripe customer and subscription identifiers and status. Card data never touches our servers.
• Technical: server logs with IP address and user agent for security and error diagnosis (short retention).

Why (legal bases)

• Providing the service you asked for (Art. 6(1)(b) GDPR): map, parties, chat, log, billing.
• Your consent (Art. 6(1)(a)): location sharing (Start hunt), sharing with friends, push notifications, reminder emails, visibility to hunters nearby, track recording. You can withdraw each in the app at any time.
• Legitimate interest (Art. 6(1)(f)): security, abuse prevention, rate limiting, aggregate product analytics without location or content.

Who can see what

• Your stands, shots, SOS alerts and chat are visible only to members of the parties you are in. Nothing is public.
• Your live position – only while you are hunting – is visible to members of your parties, and to your friends unless you switch friend sharing off (for all friends, or for a single friend).
• During an active Drückjagd all participants of that drive see each other's position, whatever your sharing switches say. This ends when the drive ends.
• If you switch on “Visible to Quarry hunters nearby”, other signed-in hunters who are out hunting themselves can see your live position while they are within about 3 km of you. Nobody further away can.
• A hunter who comes within about 250 m gets a proximity warning. It names you only if that hunter can already see you on the map; otherwise it says “another hunter”.
• Trophy posts show an approximate location only (rounded to about 1 km). Photos are re-encoded before upload, which removes embedded GPS data.
• Your phone number is shown only to members of your parties and to your friends. Your licence number is never shown; other hunters only see a “Licensed” badge.
• Public profile: username, name, avatar, and — if you are Pro — bio and club, plus log entries you explicitly mark public and trophies you post.

Processors

• Supabase (database, authentication, file storage, realtime) — EU region.
• Vercel (hosting and serverless functions).
• Stripe (payments for Pro and Club plans; we never see card numbers).
• Resend (transactional and, with your consent, reminder emails).
• PostHog (privacy-focused product analytics, EU host; only if enabled on this deployment, never with coordinates or chat content).
• Map tile providers (MapTiler, OpenFreeMap, OpenTopoMap, Esri): your IP address and the map area you view are sent to load tiles.
• Open-Meteo (weather): rounded coordinates are sent to fetch wind and weather (Pro feature).
• Web Push services of your browser vendor (Apple, Google, Mozilla) to deliver notifications.

Retention

Account data until you delete your account. Live positions as described above (at most 12 hours). Drückjagd tracks 30 days after the drive. Resolved SOS alerts 90 days. Shot markers that never became a log entry about 13 months. Chat and party data until the party is deleted or you delete your account. Server logs are kept for a short period for security.

Your rights

• Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR). You can export your log as PDF and delete your account in Profile → Delete account; this removes your data and hands parties you administer to another member.
• You have the right to lodge a complaint with a supervisory authority.

Contact

For privacy requests contact the operator named in the imprint.