1Who we are
PaddleScout is run by Andrew Franklin, a sole trader based in the United Kingdom, who is the data controller for the personal data described here.
For anything in this notice, or any question about your data, email privacy@paddlescout.co.uk.
2What we hold and why
Each row below names the purpose, the legal basis we rely on under UK GDPR, and how long the data lives. Unless a row says otherwise, deleting your account removes the data with it.
| What | Details | Legal basis | Kept for |
|---|---|---|---|
| Your account | Name, email, password (stored hashed, we cannot read it), display name, timezone, alert preferences | Contract | Until you delete your account |
| Trips & places | Route tracks, start point & place name, the original GPX/FIT file, map thumbnails, pins, saved spots | Contract | Until you delete your account — a listed spot stays; see Directory content |
| Photos | Re-encoded copies of your images; we strip GPS and embedded metadata on upload | Contract | Until you delete your account |
| Device details | Manufacturer & product from a FIT file; heart rate, calories & serial number are discarded on upload | Contract | Until you delete your account |
| Friends & sharing | Friendships, trip tags (a tag stands only once accepted), comments & questions on spots, boards | Contract | Until you delete your account |
| Directory content | Spots you list, and photos and notes you submit to listed location pages | Consent | Approved content stays published after deletion, with your name removed; a one-way email fingerprint is kept 2 years |
| Emails we send | For condition alerts: address, subject & body, to diagnose delivery; security email logged without content | Legitimate interest | 90 days, then pruned |
| Sign-in sessions | The IP address & browser identifier of each active session | Legitimate interest | While the session is active; removed on deletion |
| Billing | Name, email & subscription state, held with Paddle; card details go to Paddle, never to us | ContractLegal obligation | Subscription records until deletion; transaction records 6 years (UK tax law) |
| Safety & moderation | Reports you make, and records of moderation action on content or accounts | Legitimate interest | 2 years after the account involved is deleted |
| Near-me location | If you tap "Use my location" on the near-me search, your device location — rounded on your device — used once to find nearby spots, never sent to any other service | Consent | Not stored — used for that one search, then gone |
| Your data export | The archive you request from Settings → Your data | Contract | Until its download link expires, then deleted |
Nothing on PaddleScout makes automated decisions about you. The trip planner summarises a weather forecast for a place; it judges nothing about you, and your personal data plays no part in it.
3Your location data
A public trip that starts at your slipway tells a stranger where you live.
Trips are precise location history, so this data gets the strictest handling in the app:
- Every trip has a visibility setting — Private, Unlisted, or Public. Our servers decide what each viewer sees, before anything leaves us.
- Original track files and photos live on private storage, reachable at no public address, and an unlisted link stops working the moment you switch a trip to private.
- Photos are stripped of GPS on upload, so a shared photo can't leak where it was taken.
- A saved spot's coordinates stay yours — published only if you offer it to the directory, tick the consent box, and a moderator approves it.
If you launch from home, consider starting your recording a little way from your door, or trimming the start of the track before sharing.
4Sharing and other people
Private trips are yours alone; unlisted trips are visible to anyone holding the share link; public trips are visible to anyone, including search engines. When a friend tags you, the tag waits for your acceptance. Listing a spot, or contributing a photo or note, starts with a consent box and ends with a moderator's review. Contributed photos appear without your name, marked only "Added by a paddler".
5Who else processes your data
Four services help run PaddleScout. Each operates in the UK or the European Economic Area, so your data does not leave the region.
| Service | What it receives | Where |
|---|---|---|
| Paddle payments | Your name, email & payment details when you subscribe. Merchant of record — your card never reaches us. Its checkout script sees your IP on the billing page. | UK / EU |
| Amazon Web Services email & storage | The recipient and content of each email we send (SES), plus your uploaded track files and photos. All in AWS's London region. | UK |
| Open-Meteo weather | The coordinates a forecast is for, and place names you type into search. No name or account identifier attached. | Germany |
| OpenStreetMap maps | Coordinates we turn into place names (from our servers, no identity). Map tiles load in your browser, so OSM sees your IP and the area you view. | UK / EU |
We host our own fonts and scripts. No font network, analytics service, or advertising network is present on any page.
6Cookies
PaddleScout sets only the cookies it needs to sign you in and remember small preferences. This is the full list:
| Cookie | What it does | Lifetime |
|---|---|---|
paddlescout_session | Keeps you signed in while you browse | 2 hours from last request |
XSRF-TOKEN | Stops another website submitting forms as you | 2 hours from last request |
remember_web_* | Keeps you signed in between visits when you tick "Remember me" | Until you sign out, or 400 days |
sidebar:state | Remembers whether the sidebar is open or collapsed | 7 days |
cookie_notice_dismissed | Remembers that you dismissed the one-time cookie note | 12 months |
There are no analytics, advertising, or tracking cookies, which is why you see no consent pop-up: UK law (PECR) requires consent only for cookies beyond what the service strictly needs, and we set none. A small one-time note points new visitors here; dismissing it blocks nothing.
No tracking, no ads7Your rights
UK GDPR gives you rights over your data. Here is each one and how to use it:
- See and take your data. Request an export from Settings → Your data — a ZIP of your track files, a spreadsheet of your trips, and a file describing your boards, pins, tags, spots, and captions. We email you when it's ready.
- Correct your data. Edit your name, email, and profile at Settings → Profile.
- Delete your data. Delete your account from Settings → Profile. Three things outlast deletion: transaction records (6 years, UK tax law), moderation records (2 years), and directory content you chose to keep public, which stays without your name.
- Stop alert emails. Every alert email carries an unsubscribe link, and the same switches live in your settings.
- Restrict or object. Where the controls above don't cover it, email privacy@paddlescout.co.uk and we respond within a month.
- Complain. You can complain to the Information Commissioner's Office at ico.org.uk. We'd welcome the chance to put things right first.
8Children
PaddleScout is for people aged 18 and over. We do not knowingly hold data about anyone younger. If you believe a child has an account, email privacy@paddlescout.co.uk and we will remove it.
9Changes to this notice
When this notice changes, we update the date at the top. If a change affects what we collect or who we share it with, we will tell you by email or a notice in the app before it takes effect.