Privacy Policy — PG1 Sitefinder

PG1 Sitefinder — Ninthstone Ltd · Last updated: May 2025

    The short version: We do not create accounts, collect your name, or track you. If you accept analytics, anonymous usage data goes to Google Analytics. Your preferences (units, filter, consent status) are saved in your browser only and never sent to us.
  

1. Who we are

Ninthstone Ltd is the data controller for this service. We are registered in England and Wales (company number 16757326), with a registered office at 28 North Street, Downend, Bristol, BS16 5SW.

If you have any questions about how we handle your data, contact us at rich@ninthstone.com.

2. What information we collect

We do not operate user accounts and do not ask you to provide any personal information to use this app.

Information stored in your browser (localStorage): The app saves a small number of preference values locally on your device. These are never transmitted to our servers:

Speed unit preference (km/h or mph)
Skill filter preference (show all sites / hide Pilot-only sites)
Whether you have accepted the safety disclaimer
Whether you have accepted or declined analytics

If you accept analytics: We use Google Analytics 4 to collect anonymous usage data — pages visited, features used, and broad geographic region (country level). This data does not identify you personally. Google Analytics is only loaded after you explicitly accept analytics via the banner shown on your first visit.

Server logs: Our hosting provider (Railway) may retain standard web server logs (IP address, browser type, timestamp, page requested) for a short period for operational and security purposes. We do not use these logs to profile or identify users.

3. How we use your information

Browser preferences are used solely to personalise your experience within the app
Analytics data (if consented) is used in aggregate to understand which features are used and how the app performs — it helps us improve the product
Server logs are used for security monitoring and diagnosing technical issues only

We do not use your information for marketing, profiling, or any automated decision-making.

4. Legal basis for processing (UK GDPR)

Where we process personal data, we rely on the following lawful bases:

Legitimate interests (Article 6(1)(f)) — for server logs retained for security and operational purposes. Our legitimate interest is ensuring the service runs reliably and securely.
Consent (Article 6(1)(a)) — for Google Analytics. You are asked for explicit consent before any analytics data is collected. You may withdraw consent at any time by clearing your browser's localStorage for this site.

5. Third-party services

Open-Meteo — Weather forecast data is fetched from Open-Meteo (open-meteo.com), a free European weather model. Requests are made server-side using the latitude and longitude of each paragliding site (fixed, publicly known coordinates). No personal data about you is sent to Open-Meteo.

Google Analytics 4 — If you accept analytics, Google Analytics 4 is loaded in your browser. Google may process data in accordance with their own privacy policy. Analytics data is pseudonymised and aggregated. Google's privacy policy is available at policies.google.com/privacy. You can opt out of Google Analytics tracking globally using the Google Analytics Opt-out Browser Add-on.

Railway — The app is hosted on Railway (railway.app). Railway processes server request logs as part of providing hosting infrastructure. Railway's privacy policy is available at railway.app/legal/privacy.

6. Data retention

Browser localStorage — retained until you clear your browser data or uninstall the browser. You can clear it at any time via your browser settings.
Google Analytics — data is retained for 14 months by default within Google Analytics, after which it is automatically deleted.
Server logs — retained by Railway in accordance with their data retention policy, typically for a short operational period.

7. Your rights under UK GDPR

You have the following rights in relation to any personal data we hold about you:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your personal data
Right to restrict processing — to ask us to limit how we use your data
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
Right to data portability — to receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at rich@ninthstone.com. We will respond within one calendar month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies and local storage

This app uses localStorage (a browser storage mechanism) to save your preferences. localStorage is stored on your device and is not transmitted to our servers. It differs from HTTP cookies in that it is not sent with every request. See our Cookie Policy for full details.

9. Children's privacy

This service is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the app after changes are posted constitutes acceptance of the updated policy.

11. Contact

Ninthstone Ltd
28 North Street, Downend, Bristol, BS16 5SW
Email: rich@ninthstone.com