Privacy Policy

1. Who are we?

FindTrack is an application for metal detectorists that lets you log finds, manage plots, and connect with the community. The app is developed and maintained by the FindTrack team.

For questions about this privacy policy, please contact us via the support form in the app, or by email at support@findtrackapp.com.

2. What data do we collect?

We collect the following categories of personal data:

• Account data: username, email address and password (stored encrypted)
• Profile data: display name, bio, region, country, municipality, experience level, club and detector model — only what you choose to fill in
• Find data: description, category, date, GPS coordinates and photos of finds you register
• Plot data: plot boundaries, notes and session history
• Session data: GPS tracks from detecting sessions, stored as GPX/coordinate sequences
• Technical data: IP address (temporarily for security), session cookie, app language and theme preference
• Payment data: for a Pro subscription, payments are processed via Stripe. FindTrack does not store payment card details itself.

3. How do we use your data?

• To create and manage your account
• To deliver the core functionality of the app (saving finds, displaying the map, managing plots)
• To make your profile visible to other users — only the fields you have set to "public"
• To notify you about your support tickets by email
• To detect abuse and secure the app
• To process your Pro subscription via Stripe

4. GPS and location data

FindTrack uses GPS data for three purposes:

• Find locations: you can attach a GPS coordinate to a find. Public finds display a rounded location (approx. 1 km accuracy) to protect privacy-sensitive plot locations.
• Session tracking: GPS tracks are saved when you start a session. Tracks are private by default and are never shared automatically.
• Map functionality: your current location is used to centre the map. This is not stored on our servers unless you save it yourself as a find or session.

5. Photos and images

Photos you upload are processed on our servers: metadata (including GPS coordinates in EXIF data) is automatically removed before storage. Images are compressed and stored via Cloudflare R2.

Private find photos are accessible only to you. Public find photos are visible to all users of the app.

6. Retention periods

• Account data is retained for as long as your account is active
• After account deletion, your data is erased from our systems within 30 days
• Publicly shared finds and posts may be retained in anonymised form after account deletion for the benefit of the community
• Backups are retained for a maximum of 90 days

7. Sharing with third parties

We never sell your personal data. We share data exclusively with:

• Stripe: for payment processing (Pro subscription)
• Cloudflare: for image storage (R2) and network security
• PDOK (Dutch public geodata service): for plot search queries — these are anonymous queries containing no personal data

All these parties process data in accordance with GDPR.

8. Your rights

Under GDPR you have the following rights:

• Access: you can request what data we hold about you
• Rectification: you can have inaccurate data corrected
• Erasure: you can delete your account and all associated data via Settings → Delete account
• Objection: you can object to the processing of your data
• Data portability: you can request an export of your finds (GPX/PDF) via the app

To exercise your rights, contact us at support@findtrackapp.com or via the support form in the app.

9. Security

We protect your data with the following measures:

• Passwords are stored as hashes (bcrypt)
• All connections use HTTPS
• Session cookies are httpOnly and secure
• EXIF metadata (including GPS) is automatically stripped from uploaded images
• Rate limiting on all API endpoints

10. Cookies

FindTrack uses one session cookie to keep you logged in. No tracking cookies or advertising cookies are used. No third-party tracking services (Google Analytics, Facebook Pixel, etc.) are integrated.

11. Changes to this policy

For significant changes to this privacy policy you will receive a notification in the app. The date at the top of this document indicates when it was last updated.

12. Contact