Privacy and data
Bootcamp Tracker is run by Proj3ctS BV, Olsensesteenweg 52, 9770 Kruisem, Belgium, which is the controller for the personal data described here. Questions and deletion requests go to info@proj3cts.be.
What we store about organisers
An organiser has an account, so we store the email address it was created with, and Supabase Auth stores the password as a hash — we never see it. Every session an organiser creates is linked to that account, which is what stops one organiser reading another’s sessions.
What we store about participants
Participants have no account. When someone joins a session they choose a first name, and that name is stored with the session together with the results they enter and whether they opted in to the ranking. That is all. No email address, no phone number, no address, no payment details, and no health data beyond the exercise results themselves. A name next to a performance is still personal data, which is why it is described here rather than waved away.
Who can see it
A session’s leaderboard is readable by anyone holding its link or code while the session is open — that is the point of it, and it is why participants choose the name they are comfortable being seen under and can keep themselves out of the ranking. Everything else is restricted to the organiser who created the session, and the database enforces that row by row rather than the app doing it.
Where it is hosted
In the European Union. The database and the sign-in run on Supabase in its Central EU region (Frankfurt, Germany). The site itself is served by Azure Static Web Apps.
How long we keep it
For as long as the organiser keeps the session. There is no automatic expiry — we would rather say so than invent a retention period we do not enforce. Deleting a session deletes its exercises, participants and results with it, and deleting an organiser’s account removes every session under it the same way.
Cookies and analytics
None. There is no analytics, no advertising and no third-party tracking on this site. The app itself keeps a few things in your own browser so that it can work — your sign-in session, your language choice, and, for a participant, the name they joined with — and those never leave your device except as part of signing in.
Your rights
You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to info@proj3cts.be. If you are a participant and would rather not wait, ask the coach who ran the session — deleting the session deletes everything in it. You also have the right to lodge a complaint with the Belgian Data Protection Authority.