Privacy Policy

Last Updated: August 2, 2026

Welcome to Boulder Topo ("we", "our", or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and share your information.

Scope. This single policy covers both our mobile application (the "App") and our website at bouldertopo.com (the "Website"). The two are closely linked — the App opens Website pages to activate your account, reset your password, and delete your account — so we describe them together rather than asking you to work out which document applies to you. Sections 1 and 2 cover the App, section 3 covers the Website, and section 4 covers your account wherever you reach it. Sections 5 onward apply to everything.

1. Information We Collect in the App

• Personal Information: When you register an account, we collect information such as your email address and password for authentication purposes.
• Camera and Photos: The App requires access to your device's camera and photo library. We collect images you choose to capture or upload for the purpose of creating and sharing boulder topos and climbing areas within the App.
• Profile Photo: You may optionally set a profile photo from your device's photo library. If you sign in with Google and have not set a profile photo, we import the profile photo from your Google account as your initial profile picture. You can replace or remove your profile photo at any time in the App's account settings.
• User-Generated Content: We collect the text, coordinates, and other metadata you provide when creating or updating climbing areas and boulder problems.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the App.
• Enable you to create, upload, and share boulder topos with the community.
• Manage your account and provide customer support.
• Review and moderate user-generated content.
• Improve, personalize, and expand our services.

3. Information We Collect on the Website

You can browse bouldertopo.com without an account and without identifying yourself. We collect the following only when you actively use a form:

• Support form: the email address and message you submit. This is sent to our support mailbox so we can reply to you; it is not stored in our database.
• Beta signup form: the email address and device platform you submit, sent to the same mailbox.
• Abuse prevention: to stop automated systems from flooding our forms and sending unwanted email, we record that a request was made from your network. We store only a one-way cryptographic hash of your IP address (and, for login and password-reset requests, of the submitted email address) — never the address itself — and delete these records within 24 hours. Our legal basis is our legitimate interest in keeping the service usable and preventing abuse.
• Server logs: like any website, our hosting provider records standard access logs (including IP address, requested page, and browser identification) for security and reliability.

What the Website does not do. We use no cookies, no analytics, no advertising, no tracking pixels, and no profiling. We do not load any content from third-party servers — our fonts are hosted on our own domain specifically so that visiting our site does not reveal your IP address to anyone else.

4. Your Account Across the App and Website

Some account actions start in the App but finish on the Website, because we email you a link. This applies when you activate a new account, reset your password, or request account deletion. These pages handle your account data exactly as described in this policy — the surface you happen to be on makes no difference to how your data is treated. Links sent by email are single-purpose and time-limited.

5. Sharing of Your Information

We do not sell or rent your personal information to third parties. We may share your information only in the following situations:

• Community Visibility: Images and topos you upload will be visible to other users of the App once approved by our administrators. Your username and profile photo (if set) are visible to other users alongside your comments, logged ascents, and public profile.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.

6. Data Retention and Account Deletion

We retain your personal information for as long as your account is active or as needed to provide you services. If you wish to delete your account and associated data, you can do so within the App's settings, on our website at bouldertopo.com/data_deletion.php, or by contacting our support. Upon deletion, your personal information will be removed from our active databases, though some anonymized or public climbing data you contributed may remain. Abuse-prevention records described in section 3 are deleted within 24 hours regardless of whether you hold an account.

7. Your Rights

If you are in the European Economic Area, you have the right to access, correct, or erase your personal data, to restrict or object to its processing, and to receive a copy of it in a portable format. You may exercise these rights by contacting us, or — for erasure — by using the account deletion route described above. You also have the right to lodge a complaint with your national data protection authority.

8. Security

We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction.

9. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us via our support form.