Privacy policy

This English version is provided for convenience. FishRangeTrainer is published in France: in case of any difference, the French version prevails.

This page explains what data FishRangeTrainer collects, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR).

Data controller

The site's publisher (see the legal notice) — contact: fishrangetrainer@gmail.com.

Data collected

• Your email address and password, to create your account and log in. The password is never stored in plain text: only an encrypted hash is kept by our authentication provider (Supabase).
• Your content and activity: ranges, notes, review cards, answers (reviews and practice), memory mode results and settings. They are used to run the app and compute your statistics.
• Your account access information: access start and end dates, subscription status.
• The reports you send with the “Report a problem” button: your message, the page concerned, your browser and your email address (so we can reply). They are used only to fix problems.
• Your choice to receive our news and offers by email or not, with its date.
• Payment data (bank card) is processed directly by Paddle, our reseller: we never have access to it.

No data is sold or used for advertising.

Purposes and legal bases

• Providing the service (account, sync between devices, reviews, statistics): performance of the contract.
• Sending emails related to your account (password reset, end of the beta, subscription): performance of the contract.
• Sending FishRangeTrainer news and offers, unless you have opted out: legitimate interest (article L34-5 of the French Postal and Electronic Communications Code). You can opt out at any time in “My account” or with the unsubscribe link in every email. Your address is never sold or shared with third parties.
• Keeping the service secure and preventing abuse: legitimate interest.
• Measuring the audience anonymously to improve the site: legitimate interest.
• Managing the subscription and billing: performance of the contract and legal obligations.

Storage on your device

To run quickly and offline, the app keeps a copy of your data in your browser (IndexedDB), along with your login token, your theme and language choices (localStorage). This information stays on your device, is used only to run the app and is erased when you log out (except the theme and language). The site uses no cookies. The only other item kept is the visit identifier of the audience measurement (below), erased when you close the tab. No consent banner is needed: these items are essential to the service or used only for anonymous audience measurement.

Audience measurement

To know which pages are viewed, the site uses Vercel Web Analytics, which works without cookies and without identifying visitors: it only counts anonymous, aggregated visits (page viewed, country, device and browser type). Page addresses are sent without their parameters, and none of your training data is involved.

To spot the steps where visitors run into difficulties (sign-up, first range, subscription…), the site also measures a few steps of the journey anonymously: pages viewed and time spent on them, sign-up opened or completed, range saved, review finished, click on “Subscribe”, payment completed, and the text of the error messages shown. Each visit gets a random identifier, kept in the tab (sessionStorage) and erased when it is closed. To count the distinct visitors of each day, the server computes a fingerprint from your IP address and your browser, with a key drawn at random every day and deleted the next day: your IP address is never stored, and the fingerprint can neither recover it nor recognize you from one day to the next. No account, no email address and no cookie are used; only the referring site, the screen width (phone, tablet or computer) and the source of a campaign are recorded. These statistics are used only to improve the site, are never shared and are deleted after 25 months. Your browser's “Global Privacy Control” signal is respected, and you can opt out at any time:

Loading…

Providers (processors)

• Supabase Pte. Ltd.: database and authentication. Your data is stored in the European Union (Ireland).
• Vercel Inc. (United States): website hosting and anonymous audience measurement.
• Brevo (Sendinblue SAS, France): sending emails (account, news and offers).
• Paddle (Paddle.com Market Limited, United Kingdom): seller of the subscriptions, controller of its own processing (payment, invoices, fraud prevention).

Some of these providers are companies based outside the European Union (Vercel in the United States, Supabase in Singapore). Any data transfers to them rely on the safeguards provided by the GDPR, in particular the European Commission's standard contractual clauses included in their data processing agreements.

Retention period

Your data is kept as long as your account exists. You can delete your account and all your data at any time from the “My account” page: it is then erased from our database, with any technical backups by the host deleted when they expire. Only your bug reports, if any, are kept, made anonymous: your email address is removed from them. Accounting records related to subscriptions are kept for 10 years, as required by law.

Your rights

You have the right of access, rectification, erasure, restriction, portability (one-click export of your data from the Settings) and objection. To exercise them, write to fishrangetrainer@gmail.com. You can also file a complaint with the CNIL, the French data protection authority (cnil.fr).