Nothing about you is stored on the server. Your run lives in your browser's localStorage, on your device, and a single cookie (guest_run) remembers that you chose guest mode. Clearing your browser data removes all of it.

To sync runs across devices, the server stores:

• Your email address and display name — to identify your account.
• Passkey public keys — passkeys mean there is no password. The private half never leaves your device; what's stored here cannot be used to sign in as you anywhere.
• Session records, including IP address and browser user-agent — kept for sign-in security (spotting stolen sessions, rate-limiting abuse).
• Your runs — the items and guns you track.

A share link encodes the run in the link itself (the part after #). That fragment is never sent to or stored on the server — sharing happens entirely between you and whoever you send the link to.

The site uses Vercel Web Analytics: anonymous, cookie-free page counts (visitors, pages, country). It cannot identify you and no analytics data is tied to accounts.

The site runs on Vercel (hosting) and stores account data in a managed Postgres database. Those providers process data only to host this site. Nothing is sold, shared, or used for advertising — by them on this site's behalf, or by me.

Guest data: clear this site's browsing data, done. Account data: sign in and delete your account right here — everything (account, passkeys, sessions, runs) is removed permanently.

If what's collected ever changes, this page changes with it. Last updated: August 26, 2026.