ShooterFinderPrivacy policy ShooterFinder
1. Controller
NBaiT Ventures GmbH, Hamburg, Germany — address and contact: see legal notice.
2. What data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Apple ID identifier, e-mail address | Sign-in | Art. 6(1)(b) GDPR |
| Name, e-mail, optionally phone, hunting licence number, hunting ground, district, role | Profile, approval, contact between users | Art. 6(1)(b) GDPR |
| Location, compass bearing, time, details and note at the moment of a report | Documenting and triangulating shots | Art. 6(1)(b) and (f) GDPR (investigating poaching) |
| Own shots: location, time, note | All-clear for shots you fired yourself | Art. 6(1)(b) GDPR |
| Hunting areas (up to 3: name, centre, radius up to 15 km), push token | Selecting visible reports; alerts about shots in your area | Art. 6(1)(b) GDPR; push: (a) consent, revocable at any time |
| Comments on incidents; reports of objectionable content (reporter, content, reason); list of blocked users | Exchange between users, moderation under the terms of use | Art. 6(1)(b) and (f) GDPR; resolved reports are deleted after 12 months |
| Acceptance of terms/privacy policy with timestamp | Proof | Art. 6(1)(c) GDPR |
| Technical diagnostic events of the app (e.g. errors, response times, app/iOS version, device model, random device ID; no report contents) | Troubleshooting and stability | Art. 6(1)(f) GDPR; deleted after 30 days |
Location is recorded only when you create a report, never in the background.
3. Who sees the data
- Other approved users see reports with location, bearing, time, note and the reporter’s name – but only if the report lies in one of their hunting areas or belongs to an incident they are involved in themselves.
- The phone number is visible only to administrators, editors (for reports in their areas), users who reported the same shot and – if you switch this on in your profile – everyone who can see your report. E-mail addresses are visible only to administrators and editors.
- Local admins see name, contact details and hunting areas of the hunters they invited or approved, as well as pending registrations whose area is at most 20 km from theirs.
- Administrators additionally see the profile data of all users for approval and reported content including the reporter’s name. Users you block are not informed.
- Exports for the police or hunting authority are created by users themselves, who are responsible for passing them on.
4. Service providers
- Hosting: OVHcloud (data centre in the EU).
- Sign-in: Apple Inc. (Sign in with Apple).
- Push notifications: Expo (650 Industries, Inc., USA) forwards notifications to the Apple Push Notification service; push token and message text are transmitted.
- Weather data: For each report our server requests wind and weather at the report location – from the German Weather Service via Bright Sky, alternatively from OpenWeather Ltd. (UK). Only coordinates and time are transmitted, no personal details.
- Maps: The map in the app is provided by Apple (Apple Maps); your device loads the tiles directly from Apple. For the hand-over PDF your device loads map tiles from OpenStreetMap (OpenStreetMap Foundation, UK), which transmits your IP address.
- Terrain: Elevation and land-cover data (Copernicus, ESA WorldCover) are loaded by our server from public datasets; no personal data is transmitted.
5. Retention
Profile data until the account is deleted. On deletion, name, contact details and profile data are removed; reports remain without personal reference as part of the situation picture.
6. Your rights
Access, rectification, erasure, restriction, data portability, objection (Art. 15–21 GDPR), withdrawal of consent and the right to lodge a complaint with a supervisory authority, e.g. the Hamburg Commissioner for Data Protection and Freedom of Information.
7. Website shooterfinder.de
When you visit this website our web server (OVHcloud, data centre in the EU) processes your IP address, time, requested page and browser identifier to deliver the page and fend off attacks (Art. 6(1)(f) GDPR). These logs are deleted after at most 14 days. The website sets no cookies, uses no analytics or advertising services and loads no third-party content (not even fonts).