Legal
Privacy policy
Short version. I collect only what each app needs to work. I don't run ads, analytics or tracking cookies, and I never sell or rent your data. Data from your Google account is used only to sign you in and, in Family Budget, to save files you choose to Google Drive.
Email anthony@baschen.is to see, export or delete your data.
- Who runs this
- What this policy covers
- What each app collects
- Google user data
- How data is used
- Who it is shared with
- Where it is stored
- How long it is kept
- Cookies and local storage
- Security
- Your rights
- Children
- Changes
- Contact
1. Who runs this
The sites and apps on baschen.is are built and run by Anthony Baschenis, an individual, not a company. I am the controller of the personal data described here. Contact: anthony@baschen.is.
2. What this policy covers
- baschen.is, this website.
- Dope: the web app at dope.baschen.is and the Dope Android app.
- Family Budget: the Android app (
is.baschen.budget). - Games at games.baschen.is.
Other subdomains of baschen.is may have their own notice. Where they don't, this policy applies.
3. What each app collects
All sites
The sites are served through Amazon Web Services (CloudFront). To deliver pages and protect the service, AWS processes technical request data: your IP address, browser and device type, the page requested and the time. I don't add analytics, advertising or tracking scripts.
Dope (web and Android)
- Account. Your email address and a password, or, if you choose "Continue with Google", your name, email address and Google account identifier. Passwords are handled by Amazon Cognito and are never visible to me.
- Your data. Rifles, loads, shooting sessions, shots and corrections you enter. These are private to your account.
- Shared data. Shooting sites and ranges (name, position, distances, and similar details) are shared: every signed-in Dope user can see them, and they are linked to the account that created them.
- Location and sensors. If you allow it, the app reads your device location to find nearby sites and the weather. The Android app also reads the barometer and, where present, temperature and humidity sensors. These readings fill in the conditions for a session and are stored with that session. Location is not tracked in the background.
- Weather. To get current weather and elevation, your device sends the coordinates of the site or your location directly to Open-Meteo. No account information is sent with it.
Family Budget (Android)
- On your phone. Bills, amounts, payers, notes and documents you share into the app (PDFs, images, emails). Bill details are read from these documents on the device.
- Family sync (optional). If you turn on sync, you sign in with Google (name, email, account identifier) and your budget data is stored in Google Firebase (Authentication and Cloud Firestore) so the family members you invite can see and edit it. Nobody outside your family group has access.
- Google Drive (optional). If you turn on archiving, the app saves bill documents and the year-end PDF to your own Google Drive. See Google user data.
Games
Games run entirely in your browser. Progress and settings are saved in your browser's local storage and never sent to me. There is no account.
4. Google user data
Dope and Family Budget let you sign in with Google. Family Budget can also use Google Drive. Here is exactly what is accessed and why.
| App | Google permission | What it is used for |
|---|---|---|
| Dope | openid, email, profile |
Create and sign in to your Dope account, and link it to an existing Dope account with the same verified email. Your name is shown in the app. |
| Family Budget | Google Sign-In (openid, email, profile) |
Identify you to your family group for sync. |
| Family Budget | drive.file |
Create, update and read only the files the app saves to your Drive (bill documents, year-end PDF) or that you open with it. It cannot see other files in your Drive. |
- Google user data is used only to provide these features to you. It is not used for advertising, not sold, not used to build profiles, and not used to train AI or machine-learning models.
- It is not shared with anyone except the service providers listed below, as needed to run the app, or when required by law.
- I don't read your Google data myself, except with your permission (for example, to help with a support request), for security, or where the law requires it.
- You can remove an app's access at any time from your Google Account at myaccount.google.com/permissions.
The use and transfer of information received from Google APIs to any other app by baschen.is apps adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. How data is used
- To provide the apps: sign-in, storing and syncing what you enter, showing shared sites, computing ballistic corrections.
- To keep the service secure and working: preventing abuse, fixing errors.
- To answer you when you contact me.
No automated decisions with legal or similar effects are made about you. Under the GDPR, the legal basis is the performance of the service you asked for (contract) and, for security and technical logs, my legitimate interest in running a safe service. Location and sensor access rely on the permission you give on your device.
6. Who it is shared with
I don't sell, rent or trade personal data. It is processed only by these providers, under their own data protection terms:
- Amazon Web Services: hosting, sign-in (Cognito), database and storage for the websites and Dope.
- Google: Google sign-in, Firebase (Family Budget sync), Google Drive (Family Budget archiving), Google Play (app distribution).
- Open-Meteo: weather and elevation lookups from Dope, using coordinates only.
Inside the apps, Dope sites and ranges are visible to other Dope users, and Family Budget data is visible to the members of your family group. I may disclose data if the law requires it.
7. Where it is stored
Dope data is stored on AWS in Ireland (eu-west-1). Family Budget sync data is stored in Google Cloud in Belgium (europe-west1). Website content is delivered from CloudFront locations worldwide. Some providers may process data outside the European Economic Area; where they do, they rely on safeguards such as the EU Standard Contractual Clauses.
8. How long it is kept
- Account and app data: until you delete it or ask me to delete your account.
- After a deletion request: removed within 30 days, including backups as they roll over. Sites and ranges you shared in Dope are deleted, or kept without any link to you if other users depend on them.
- Technical logs: only as long as needed for security and fixing errors.
- Data on your phone or in your browser stays there until you clear it or uninstall the app.
9. Cookies and local storage
There are no advertising or tracking cookies. Dope keeps your sign-in tokens in your browser's storage so you stay signed in, and the sign-in pages (Amazon Cognito, Google) set the cookies they need for sign-in. Games keep progress in local storage. Clearing your browser's site data removes all of it.
10. Security
All traffic uses HTTPS. Data is encrypted at rest by AWS and Google. Access to the infrastructure is limited to me and protected by single sign-on. No system is perfectly secure; if a breach affects your data, I will tell you and the relevant authority as the law requires.
11. Your rights
You can ask to access, correct, export or delete your data, to restrict or object to its use, and to withdraw a permission at any time. Email anthony@baschen.is from the address on your account; I answer within 30 days. If you are in the EU or the UK, you can also complain to your data protection authority.
12. Children
These apps are not meant for children under 16, and I don't knowingly collect their data. If you think a child has created an account, contact me and I will delete it.
13. Changes
If this policy changes, I will update the date at the top. For significant changes, I will tell signed-in users in the app or by email before they take effect.
14. Contact
Anthony Baschenis · anthony@baschen.is