Legal notice and privacy

In short

NoseTrack keeps your training log in your browser and nowhere else. There is no account, no sign-in and no server for the app to write to. The only personal data processed is the server log entry your hoster records when the page is fetched — see Hosting below.

Controller

The controller under the GDPR is the person named in the legal notice above, at the address and email address given there.

Your training data

Sessions, runs, searches, dogs, odours, training aids and settings live in your browser's local storage, on your device. They are not transmitted, not analysed and not backed up — this browser is the only copy.

You delete them with “Delete all data” in Settings, or by clearing the site's data in your browser. Either is immediate and complete; there is nothing left on our side to delete.

Export and sharing

An export happens only when you ask for one. “Send to…” hands the file to your operating system's share sheet, and you choose where it goes from there. The app uploads nothing and never learns the destination.

No cookies, no analytics, no third parties

The app sets no cookies, loads no fonts, maps, videos or social media elements from other servers, and runs no analytics or error telemetry. That is also why there is no cookie banner: there is nothing to consent to.

The page's Content Security Policy enforces it: “connect-src 'self'” permits connections to this site's own origin only, so a script trying to send data anywhere else would not get through.

Service worker and offline use

So the app works without a network, a service worker stores its program files in the browser cache. That is technically necessary for offline use, holds no training data, and is not used to recognise anyone.

Hosting

The site is hosted by Vercel Inc. When a page is fetched, the hoster processes technically necessary access data, including your IP address, the date and time, the address requested, and browser and operating system details. The legal basis is Art. 6 (1) (f) GDPR — the legitimate interest in delivering a website securely and reliably.

These logs are not combined with your training data, which is technically impossible: the training data never reaches the server. A data processing agreement is in place with the hoster.

Your rights

You have the rights under Art. 15 to 21 GDPR: access, rectification, erasure, restriction, portability and objection. They apply to the log data described above; write to the address in the legal notice.

For your training data you do not need us: access and portability are the export function, and erasure is the button in Settings.

You also have the right to lodge a complaint with a data protection supervisory authority.