Privacy Policy

Effective Date: 17 November 2024

At Crux Climbing Log, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and protect your data when you use our website. This website is maintained by an individual and is not affiliated with any company.

1. Information We Collect

We collect the following information:

Username and Password: You provide a username and password when creating an account. This information is used to create and manage your account securely.
Climbing Logs: You can log your climbs, including details about your attempts, ratings, and comments. This data is visible only to you and is not shared with others.
Authentication Tokens: If you select "Remember Me," a secure token is stored in your browser's local storage, allowing you to stay logged in without re-entering your credentials. These tokens are encrypted and have a fixed expiration date.
Session Cookies: We use session cookies to manage active logins. These cookies are essential for site functionality and are deleted when you log out or close your browser.

No other personal data is collected or stored.

2. How We Use Your Information

We use the information we collect for the following purposes:

Account Management: To create and manage your account, including your climbing logs.
Authentication: To log you in securely and, if you select "Remember Me," to keep you logged in using local storage.
Security: To protect your account by implementing secure login methods, encrypted tokens, and session management.

We do not share, sell, or rent your personal information to third parties.

3. Cookies and Local Storage

We use session cookies and browser local storage for specific purposes:

Session Cookies: These cookies are essential for managing your active session. They are temporary and are deleted when you log out or close your browser. These cookies do not track your activity or store personal data beyond your session.
Local Storage: If you select "Remember Me," an authentication token is stored in your browser's local storage to keep you logged in for up to 30 days. This token is encrypted and cannot be accessed by other websites.

You can manage or clear your local storage and cookies through your browser settings at any time.

4. Data Security

We implement appropriate security measures to protect your personal data:

Passwords are securely hashed and encrypted.
Authentication tokens are encrypted and stored with a fixed expiration date.
Session cookies are set with secure attributes (`HttpOnly`, `Secure`, and `SameSite=Strict`) to prevent unauthorized access.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. You use this site at your own risk.

5. Your Rights

You have the following rights regarding your data:

Right to Access: You can request a copy of the data we hold about you.
Right to Rectify: You can correct any incorrect or outdated data.
Right to Delete: You can request that we delete your account and any personal data associated with it.

To exercise these rights, please contact us at crux@spiri.be.

6. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the website's services. If you delete your account, your username, password, climbing logs, and authentication tokens are permanently deleted from our system.

7. Data Sharing and Hosting

Your data is stored on servers provided by One.com. These servers are located within the EU, and I ensure compliance with GDPR for all data transfers.

I do not share, sell, or rent your data to third parties. However, I may use trusted third-party services for site functionality (e.g., email notifications), all of which comply with applicable privacy regulations.

8. Changes to This Policy

We may update this privacy policy to reflect changes to our practices or for legal and regulatory compliance. The "Effective Date" at the top of this policy will be updated accordingly. Continued use of the site after changes to the policy implies your acceptance of the updated terms.

9. Contact Us

If you have any questions about this privacy policy or your data, please contact us at:

Email: crux@spiri.be