This policy explains what Boardlordz (the app and boardlordz.com, published by Prova Tech Limited) collects, why, and what you can do about it. Short version: we keep the minimum needed to run your account, we never sell or share it for advertising, and you can delete everything yourself from inside the app.
What we collect
- Account: your email address, a username you choose, and a password we store only as a salted hash. If you sign in with Google we store the Google account identifier and email Google gives us; we never see your Google password.
- Connected board apps (optional): if you connect a Kilter or Tension account, we send the username and password you type to that board's own login endpoint once and keep the token it returns, encrypted, so we can read your logbook (ascents and attempts) into Boardlordz. We do not store the password. Disconnecting forgets the token; the ascents stay in your logbook until you delete them or your account.
- Beta videos: links you add to climbs (Instagram, TikTok, YouTube) are public and shown with your username.
- Optional profile details: height, weight and ape index, only if you enter them. They are shown back to you and used, in aggregate, to study how reach and weight relate to climbing grades. You can change or clear them on your profile at any time.
- What you do in the app: the climbs you log (with your optional grade and quality opinion), your likes, your lists, the problems you create, and session descriptions you type into the planner. All of it exists so the app can show it back to you and improve its grade estimates.
- Technical: standard server logs (IP address, request path, time) kept briefly for security and debugging.
- Usage events: a random install id plus the step you reached (opened the app, signed in, picked a board, connected a board, lit a climb, logged a climb) and, if you arrived through a poster or link, its code. These go only to our own server, so we can see where new climbers get stuck. No third-party analytics, no advertising identifiers, no cross-site tracking.
- Bluetooth: connecting to a board happens on your device. We do not receive your board's identity or your location.
What we do with it
Run your account, send the emails you ask for (verification and password reset), show your logbook and lists, and compute aggregate statistics such as which holds are used at which grades. Aggregates never identify you. We do not sell data, show ads, or share personal data with third parties except the providers below.
Who else handles your data
- Hosting for the API and database (Fly.io), and for the web app (Cloudflare).
- A transactional email provider, used only to deliver verification and reset emails.
- Google, only if you choose Google sign-in.
We do not share anything with board manufacturers or their apps, and we never ask for your login to any of them.
How long we keep it
Until you delete your account. Deleting it from the You screen removes your account, logbook, likes, lists, planner history and the problems you created, immediately and permanently. Email verification and reset links expire within 24 hours and are deleted when used. Server logs are kept for a short rolling window.
Your choices and rights
- Delete your account at any time from inside the app.
- Ask us for a copy of your data, or to correct or erase it: support@boardlordz.com. We answer within 30 days.
- Use the app without an account: browsing, searching and lighting up the board need no sign-in.
Children
Boardlordz is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.
Changes
If this policy changes in a way that matters, we will say so in the app and update the date above.
Contact
Prova Tech Limited · support@boardlordz.com