Privacy Policy

Arroway Range Tracker - rangetracker.arroway.cz

Last updated: 14 May 2026

1. Introduction

This Privacy Policy explains how Arroway Range Tracker ("we", "us", "our"), operated by Filip (sole operator) based in the Czech Republic, collects, uses, stores, and protects your personal data when you use our web application at https://rangetracker.arroway.cz (the "Service").

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Czech law. Contact for all privacy matters: yo@filip.wtf

2. Who We Are (Data Controller)

Arroway Range Tracker, operated by Filip (sole operator), Czech Republic.

Contact: yo@filip.wtf

A note on how this service is built: Arroway Range Tracker is developed and maintained with significant assistance from artificial intelligence (AI) tools. While every effort is made to ensure the Service functions correctly and responsibly, users should be aware of this context. If you have any questions, concerns, or encounter anything unexpected, please contact us directly at yo@filip.wtf. We are a small, transparent operation and will always respond personally.

3. What Personal Data We Collect

We collect as little personal data as possible. The full and complete list of personal data we may collect is set out below. We do not collect sensitive personal data (such as health information, financial data, biometric data, or political or religious beliefs). We do not build user profiles for advertising. We do not sell or share your data with third parties for their own commercial purposes.

3.1 Account and Identity Data

When you register, we collect:

  • Email address — required, used for login and transactional communications
  • First name — optional, used only to personalise the interface
  • Last name — optional
  • Phone number — optional

That is the complete and exhaustive list of personal identity data we collect. We collect nothing else that could identify you personally.

3.2 Training Session Data

When you log training sessions, you may enter:

  • Date and time of the session
  • Bow type and number of arrows shot
  • Location (optional — entered by you manually, never tracked automatically)
  • Target type (optional)
  • Any notes you choose to add

This data belongs to you. It is stored in your account and used solely to power your personal training log.

3.3 3D Range Directory Data

Users may contribute information about 3D archery ranges, including range name, location, and a contact person for the range. If that contact person is an identifiable individual, their details are personal data under GDPR.

If you submit contact details for a third party, you confirm that this information is either publicly available (e.g., from the range's own website) or that you have the individual's consent.

3.4 Technical and Usage Data

To keep the Service running securely, we process:

  • IP address and browser/device type — collected by our hosting infrastructure, not stored long-term by us
  • Authentication and session tokens — managed by Supabase
  • Anonymised usage statistics — via Google Analytics, only if you consent

We do not use this data to profile or track you individually.

4. The Service Is Free — Ko-fi Is Voluntary Support

Arroway Range Tracker is completely free to use. There is no subscription, no paywall, and no in-app payment system. Some extra features are unlocked as a thank-you for users who voluntarily choose to support us via Ko-fi — but this is a tip, not a purchase, and it is entirely optional.

Here is exactly how this works:

  • Ko-fi (https://ko-fi.com/arroway) is a fully separate, independent platform with its own privacy policy and terms.
  • Any contribution you make on Ko-fi happens entirely on Ko-fi's platform. We do not receive your payment details, card information, or any financial data.
  • There is no API connection, automated data sync, or any technical link between Ko-fi and Arroway Range Tracker. The two platforms are completely independent of each other.
  • If you wish to receive the extra features after supporting us, you notify us manually (e.g., by email). We then manually activate the features on your account as a gesture of appreciation.
  • No payment data of any kind is ever stored in our system.

Ko-fi page: ko-fi.com/arroway

5. Legal Basis for Processing

  • Contract performance (Art. 6(1)(b)) — account and email data, to provide the Service
  • Legitimate interests (Art. 6(1)(f)) — technical/security data, to maintain a secure service
  • Consent (Art. 6(1)(a)) — analytics cookies and marketing emails, where you have opted in
  • Legal obligation (Art. 6(1)(c)) — where required by law

6. Cookies and Google Analytics

We use Google Analytics for general, anonymised usage insight. Analytics cookies are only placed with your consent. You can withdraw consent at any time via browser settings or the cookie preferences link in the Service footer.

7. Data Storage and Security

All data is stored in a Supabase PostgreSQL database in Frankfurt, Germany (EU). No data is transferred outside the EEA in ordinary operation. We use HTTPS/TLS encryption, row-level security, access controls, and password hashing.

8. Emails We Send

Transactional emails

Required for account operation — password resets, confirmations. Cannot be opted out of while your account is active.

Marketing emails

Sent only if you have explicitly opted in via double opt-in. Unsubscribe at any time via the link in any marketing email or by contacting yo@filip.wtf.

9. Data Retention

Data is retained while your account is active. After deletion, personal data is removed within 30 days (except where legal retention applies). You can delete your account from within the Service at any time.

10. Your Rights Under GDPR

You have the right to access, correct, delete, restrict, or port your data, and to object to processing or withdraw consent. Contact us at yo@filip.wtf to exercise any right. We respond within 30 days.

You may also complain to the Czech supervisory authority: Úřad pro ochranu osobních údajů (UOOU) at www.uoou.cz.

11. Third-Party Services

  • Supabase — database and authentication, Frankfurt EU servers
  • Google Analytics — anonymised analytics, with consent
  • Ko-fi — independent voluntary support platform, no data link to this Service
  • Transactional email provider — operational emails only
  • GitHub — code repository, no user data stored there

12. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect data from under-16s.

13. Changes to This Policy

Material changes will be communicated by email or in-app notice before they take effect.

14. Contact

Email: yo@filip.wtf

Website: https://rangetracker.arroway.cz