Privacy Policy

From the app: nothing we keep. There is no sign-in. Nothing you enter in the app — guns, loads, matches, shot data — is uploaded to us, and we could not read it if we wanted to. The app makes two kinds of request to a service we run at api.wristdope.com, described under Weather data and Version checks. Both are answered and discarded, and neither includes an account, a device identifier, or your precise location.

The one exception, on this website: if you join a waitlist or ask to be notified about a product, we collect the email address you give us — see Waitlists and email signups.

To calculate ballistic firing solutions, Wrist Dope uses the following data locally on your device:

• Location — used on-device for compass heading and altitude. It is also used to request local weather, which is the one case where it leaves your device — and before it does, the app rounds it to a grid about 5 km (3 miles) across. That rounded point is what is sent. Your precise location never leaves your device.
• Motion & orientation — used on-device to measure the angle of your device for shot calculations.
• Your gun and load profiles — saved locally on your device so they persist between launches. They are not uploaded anywhere.

Automatic weather is the only feature that sends your location off your device, and you can leave it off — entering temperature, pressure and humidity by hand works everywhere in the app, and the ballistics are identical either way.

On Apple Watch and iPhone, weather comes from Apple's WeatherKit, asked for by the app on your device. It does not pass through any service of ours. The app rounds your location to about 5 km before asking Apple, and Apple receives that rounded point to return local conditions, governed by Apple's Privacy Policy.

On Android and Wear OS, weather comes from Apple Weather, through a small service we run at api.wristdope.com. When the app asks for conditions it sends, over an encrypted connection, the rounded (about 5 km) location, a random token that changes every day and is linked to nothing, and — as most apps do — the app's version, your device model and your operating system version. It sends no account, no advertising identifier and no unique device identifier, because there is none to send. Our service passes the rounded location to Apple's WeatherKit under Apple's Privacy Policy, so Apple sees our server rather than your device, and returns the conditions to the app.

We keep neither the location nor the token. Our own log line for a weather request records the route, the response status, how long it took and whether the answer came from cache — nothing else. Conditions for a rounded point may be cached for up to six hours so that nearby users share one lookup; that cache is keyed by the map grid, not by any user. The daily token exists only to keep the service from being abused: it counts requests for at most 24 hours and is then gone. On Android phones, the request for that daily token also carries a Play Integrity check from Google — see Third parties. Because Google Play requires apps to disclose this plainly, our Play listing declares approximate location as shared with Apple for app functionality, processed only for the moment of the request.

Weather data provided by Apple Weather. Other data sources.

When you open the app it may ask our service whether a newer version exists, and whether we have a notice to show — for example, that an update fixes a bug that could produce wrong holds. This happens on every platform, including iPhone and Apple Watch, and it is the only request the Apple apps make to us. The request carries only the platform, the app's version and build number, your device model and your operating system version. No account, identifier or location is involved. We keep daily counts of how many devices of each kind asked, and nothing else.

The Wrist Dope app includes no advertising, no analytics SDKs, and no third-party data collection. Four companies are involved in the two requests described above:

• Apple— weather, on every platform. On iPhone and Apple Watch the app asks Apple's WeatherKit directly; on Android and Wear OS our service asks on the app's behalf, so Apple sees our server rather than your device. Governed by Apple's Privacy Policy.
• Vercel — hosting, for our service and for this website. As our hosting provider Vercel sees the network address of any request, along with the path and the app version, device model and operating system version described above, for the short period it keeps its own request logs. Our code never reads that network address, we do not export those logs anywhere, and we read them only to diagnose errors.
• Upstash— the database behind our service's counters, provisioned through Vercel. It holds the daily token counters (keyed by a one-way hash of the token, gone within 24 hours), the aggregate daily counts described under What we keep, and nothing else — no location, no identifier, no request content.
• Google — on Android phones only. Play Integrity, a Google Play service, tells us whether the app asking for weather is the genuine Wrist Dope app. Google Play on your device produces a sealed result and our service asks Google to open it, so what Google receives back is its own token and nothing we added about you. We read the verdict, count it, and discard it; the account information such a result can carry is never read.

We do not sell your information and we do not share it with anyone beyond the providers named here. For the website, Vercel is also our analytics and waitlist-storage provider, described below. When we start sending waitlist emails we will use an email service provider to deliver them, and will name it here before the first send.

Weather requests, version checks and the daily token are not retained by us: the token's counters expire within 24 hours and the token itself stops working after that. What we do keep is aggregate and carries no identifier — daily counts of how many requests came from each platform, app version, operating system version and device model. Those counts are kept for up to 400 days. We also keep a daily count of how many distinct tokens were seen, stored as a probabilistic counter that the individual values cannot be read back out of, and discarded after 48 hours. Weather for a rounded point is cached for up to six hours, keyed by the map grid rather than by any user. Waitlist emails are kept as described below.

The wristdope.com website (not the app) uses Vercel Web Analytics, a cookieless, aggregated analytics service, so we can understand how the site is used. For each page view it records the URL, referrer, country/region, device type, and browser/OS. It sets no cookies, stores nothing on your device, uses no persistent identifiers, and does no cross-site tracking; visit data is de-identified and any session reference is discarded within 24 hours.

Vercel processes this data on our behalf as a service provider under a data processing agreement, and participates in the EU-U.S. Data Privacy Framework, which covers the transfer of European visitors' data to the United States. Our legal basis for this processing is our legitimate interest in understanding how the site is used. We do not sell or share personal information.

If you join a waitlist or ask to be notified about a product on wristdope.com, we collect and store your email address, the product you asked about, and (optionally) the watch or phone model you selected. This is stored in a private datastore hosted by Vercel on our behalf, and signup activity is relayed to our internal team tools so we know you signed up. We use it for exactly one thing: to email you when the product you asked about becomes available. No newsletters, no marketing, nothing else.

We do not sell it, we do not combine it with app data (we have no app data), and the only parties that handle it are the service providers named under Third parties. Every email we send will include an unsubscribe link; you can also email support@wristdope.com any time and we will delete your address on request. We keep waitlist emails until the product ships and the list is wound down, or until you unsubscribe or ask us to delete yours, whichever comes first.

Wrist Dope is intended for adults. We do not knowingly collect personal information from children; if you believe a child provided an email address on a waitlist, contact us and we will delete it.

If this policy changes, the updated version will be posted on this page with a revised date.

Questions? Email support@wristdope.com.