This document is available in English only.
Privacy Policy
Last updated: 16 September 2026
O-Logs ("we", "us", "the app") is an orienteering results and GPS-track replay service. This policy explains what personal data we collect when you use O-Logs, why, how long we keep it, and the rights you have over it.
Who's responsible for your data
O-Logs is operated by Jakub Ritter, an individual based in the Czech Republic. Contact for any privacy question or request: [email protected].
What we collect
| Category | What | Why |
|---|---|---|
| Account | Email, password (hashed — we never see it in plain text), username, club (optional) | Create and secure your account; username/club are shown publicly next to your results. |
| Age & consent record | A timestamp and document version recording that you confirmed you're 16+ and agreed to these terms | Proof of what you agreed to and when. Never shown publicly. |
| Activity data | Uploaded GPS files (GPX/FIT), the parsed track (timestamped latitude/longitude/elevation), distance, duration, start time | Powering the results table and the GPS replay/route comparison — the core purpose of the app. |
| Event data | Event name, club, country, dates, uploaded map images, courses, control points, invite codes — only if you organize an event | Running and sharing an orienteering event through O-Logs. |
| Technical data | IP address and standard request logs, handled by our infrastructure provider (Supabase) | Security, abuse prevention, and keeping the service running. |
We don't collect payment information (O-Logs doesn't charge for anything at this time), and we don't buy personal data about you from anyone else.
GPS track data specifically
Your GPS track is the record of where you physically were during a race. Depending on where you start and finish your GPS recording, it can incidentally reveal things like your home area. We only use it to render your route and results for the event you linked it to; we don't analyze it for any other purpose, and it's never sold or shared with advertisers.
Cookies & local storage
O-Logs uses your browser's local storage to keep you logged in between visits — this is strictly necessary for the app to function and doesn't require consent under EU/UK cookie rules. We don't currently use any analytics, advertising, or tracking cookies. If that changes, this policy and the cookie banner shown on the site will be updated first, and you'll be asked to consent before anything non-essential loads.
Who we share data with
We use Supabase (database, authentication, and file storage) to run O-Logs; they process data on our behalf under a Data Processing Agreement and don't use it for their own purposes. We don't sell, rent, or share your personal data with advertisers, data brokers, or any other third party. Your username, club, and event results are visible to other O-Logs users by design — that's the point of a results/replay app.
International data transfers
O-Logs is based in the Czech Republic (EU/EEA) and our infrastructure runs in the EU (Ireland), so data from EU/EEA users stays within the EU. If you're outside the EU/EEA, your data is transferred into the EU for processing under Supabase's standard data-protection safeguards. Data protection rules in a small number of countries (for example China or Russia) place extra restrictions on sending residents' data abroad; O-Logs doesn't currently take special measures for those, so if that's a significant part of your user base, get local legal advice before relying on this policy there.
How long we keep it
We keep your account and activity data for as long as your account is active. If you delete your account, your personal data (profile, activity files, GPS tracks) is deleted; where you've organized an event other people's results depend on, the event itself stays (so others' results aren't destroyed), but it's no longer linked to your identity.
Your rights
Wherever you are, you can:
- Access & export your data — use "Export my data" in your profile page for a full copy.
- Correct inaccurate data — edit your profile, or an activity's details, directly.
- Delete your account and personal data — use "Delete my account" in your profile page. This is permanent.
- Object to or restrict certain processing, or ask us questions about any of the above — contact us at the address above.
California privacy rights
If you're a California resident, the CCPA/CPRA gives you the right to know what personal information we hold about you, request its deletion, correct it, and opt out of its "sale" or "sharing." We don't sell or share personal information with third parties for cross-context advertising, so there's nothing to opt out of — the access/deletion tools above cover your other rights.
Children's privacy
O-Logs requires everyone to be at least 16 years old to create an account. You confirm this yourself at signup, alongside agreeing to this policy and the Terms of Service — we don't independently verify age (e.g. via ID). O-Logs isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If we become aware that an account belongs to someone under 16, we'll close it.
Security
We use industry-standard practices (encrypted connections, hashed passwords, row-level access controls on our database) to protect your data, but no system is 100% secure. If we ever become aware of a data breach affecting your personal data, we'll notify affected users and relevant authorities as required by law.
Changes to this policy
If we make a material change to this policy, we'll update the "last updated" date above and, for significant changes, notify you directly (e.g. by email).
Contact
Questions, requests, or complaints about your data: [email protected].