Trophy Ballistics
Privacy Statement
Version 2 November 2026
Trophy Ballistics is a ballistics app for shooters and hunters. Your entries are stored locally in the app. There is no in-app user account, advertising, built-in analytics or tracking. The web test does have a separate Cloudflare Access login. There is no cloud synchronisation of your app entries. Without a copy you share, we cannot access your guns, ammunition or logbook. Hosting, searches, weather, support and future Apple purchases have the separate data flows described below.
External processing includes online searches, fetching an available ammunition list, weather, support, files you share and loading or signing into the web version. Device and cloud backups may also depend on your own settings. The known processing is explained below.
Who we are
Trophy Ballistics is a product of Tactical Trophy, a sole proprietorship (eenmanszaak), Kieler Bocht 71-24, 9723 JA Groningen, the Netherlands, Dutch Chamber of Commerce no. 93837925. We are the controller for the processing of personal data described here. Send privacy questions to [email protected].
What stays on your device
The app does not automatically upload the following to us or a synchronisation service:
- guns, ammunition, reloading data, notes and conditions;
- shooting sessions, groups, real shots and load tests;
- your settings and the local counter of completed photo measurements.
Group photos and usage counter. The app measures the chosen photo locally and does not retain it as a session attachment. Measurements and a counter of completed photo measurements remain locally for the free allowance of 5 measurements. The counter is part of local app data and a backup you create; it is not sent to us as usage telemetry. It is not an account-based or tamper-proof quota across your devices. Your original photo may remain in your photo library or own cloud backup.
Chronograph files. A file is read on your device. Depending on the import, averages per temperature or session data such as mean, shot count, SD and ES are retained. The original file is not stored as an app attachment.
Backups and PDFs. You create a backup, load card or target card yourself and keep it where you choose. A backup holds everything in the app and is not encrypted, so store it with care. If you put such a file in a cloud service, that service's policy applies.
Location for Coriolis. After you tap Use my location, the app uses your position on your device. Only the latitude is kept. This function makes no request to the weather service. Device location services are also subject to the platform provider's settings and policy.
Deleting local app or website data does not automatically delete exports, your original photos, support e-mails or device and cloud backups. The exact deletion and backup behaviour of the native iPhone app has not yet been tested. We provide no cloud recovery of your entries.
Looking up information online
Only when you tap a search button does the app open a search with DuckDuckGo in your own browser. The request contains your typed text, for factory ammo the selected gun's caliber if not already included, the words “ballistic coefficient” or “muzzle velocity” and a manufacturer-site filter when a brand is recognised. Deliberately searching the whole web removes the filter. The search engine receives the query, IP address and technical information sent by your browser. The app does not include your complete profile, serial number, logbook or GPS location for this purpose.
The app does not read or store results, manufacturer pages you visit or search history, and builds no collection of values copied by users. Values you subsequently save in the ammunition form do become part of your local profile. The query may remain in your own browser history. Do not enter personal or confidential information in search terms.
Our processing serves the lookup function you request; the basis for necessary request data is performance of that function (GDPR article 6(1)(b)). This search needs an external request, but manual input remains available. We do not operate DuckDuckGo; it processes requests under its own privacy policy. DuckDuckGo says it does not retain searches alongside IP addresses or unique identifiers; this does not mean no IP address is received during a request. When you open a result, that site also receives your IP address and browser data and may use its own cookies. We do not collect that information through the app, but remain responsible for our own disclosure decision.
Fetching an available ammunition list
The public app currently ships with an empty ammunition list. A future public online list will include brands only with written permission. The protected web test may use a separate private list. Opening it attempts to fetch a configured list; without a configured address the native app makes no such network request. The host receives your IP address and ordinary technical request information, not your entered gun profiles, search text or logbook as request contents. The request is therefore not “without personal data”. A valid downloaded list and version may be kept locally for offline use until replaced or storage is deleted.
The purpose is to provide a current list. Performance of the requested function is the basis for necessary fetching; strictly necessary access security may rely on legitimate interests after balancing interests. The test host is Cloudflare. One viewing is not the same as one fetch: reopening may make a new request. You can also use the app with your own input without an online list.
Fetching the weather
The weather is only fetched when you tap for it. The app then sends a request to OpenMeteo GmbH, Switzerland:
| What you do | What the service receives |
|---|---|
| Get local weather | Latitude and longitude rounded to three decimals (roughly 100 metres, depending on location), plus your IP address; this is not anonymous |
| Search for a place | The typed place name and your IP address; then the coordinates of the result and your IP address for the forecast request. Not your own GPS position |
The purpose is to show the weather at that place as an input aid for the calculation; weather values do not guarantee a correct result. The app does not keep your position for this; it does keep the weather values it fetched.
Open-Meteo describes itself in its policy as an independent controller for its own processing. We remain responsible for our decision to share data with this service through the app. According to its own terms, its server logs may contain coordinates and IP addresses, are deleted after 90 days and are not shared with third parties. The European Commission considers that Switzerland offers an adequate level of protection.
The app explains this before your position is first used and asks for your consent (GDPR article 6(1)(a)). The permission of your device comes on top of that. You can stop future location requests by not using the function and withdrawing device or browser permission. Withdrawal does not affect earlier lawful processing. Refusal only prevents location-based weather; manual entry and place search remain available. For a place search you request and necessary request data, performance of that function is the basis (article 6(1)(b)). Open-Meteo is responsible for its own log processing.
When you e-mail us
Support and suggestions go through your own e-mail app. The app opens a draft that names the app version and the kind of device, for example iOS. You see that text before sending, and nothing leaves until you press send.
We then receive your e-mail address, your name if your mail shows it, and what you write. We use this to handle your request. For necessary contractual support, the basis is performance of the contract (GDPR article 6(1)(b)). For voluntary suggestions and necessary security handling, it is our legitimate interest in responding and securely administering the service (article 6(1)(f)). Attachments are not automatically reused for other purposes. Without contact details we cannot reply personally.
We retain support and suggestion e-mails for no more than 2 years after the last substantive contact and delete them sooner when no longer needed. Only data needed for a specific statutory retention duty or to establish, exercise or substantiate a legal claim may be kept longer, for that necessity; this does not automatically apply to the entire mailbox. Our business mailbox is hosted on Google Workspace; Google is our mail processor for this service. Google may process data outside the EU. The safeguards in the terms of those services apply. E-mail us if you want to know more about them.
If the app cannot read stored data, it attempts to preserve an untouched local recovery copy. It may contain all data from that unreadable storage; it is not encrypted by the app and is not automatically uploaded. If preservation fails, the app blocks further saving. Save a copy lets you save or share a file yourself. If you send this to support for recovery, we use it only for that recovery and delete recovery attachments and working copies when no longer needed, no later than the period above unless a specific legal necessity applies.
Please do not send data we do not need, such as licences or identity documents.
Downloads and purchases
The current test version is a web app. A future native version will be distributed through Apple's App Store. Apple's privacy policy applies to downloads and in-app purchases. Payments run through Apple; we do not receive a full card number or CVC. Pro payment, trials and restoration have not yet been built. The local preview switch and photo counter are not Apple purchase receipts.
Web version
This also applies to the protected private test. The web version is hosted by Cloudflare, which processes your IP address and request data for us to deliver the site. Parts of the web engine come from Google, which sees your IP address for that. Both companies may process data outside the EU. The safeguards in the terms of those services apply. E-mail us if you want to know more about them. Legal basis: our legitimate interest in delivering the site. Your data in the web version is stored in your browser; clearing website data deletes it.
Cloudflare Access also processes your e-mail address for the login code and authentication and access data. Local browser storage saves the app data and preferences you request; it is not an advertising cookie. On this website we place no cookies and use no analytics.
What we do not do
We do not sell data, show advertising or track you. We make no solely automated decisions with legal or similarly significant effects on you and build no marketing profiles. Nothing in the app has to be filled in except what a calculation needs, and that stays on your device too.
Under 18
The app is intended for people aged 18 and over.
Your rights
Subject to the legal conditions, you have rights of access, rectification, erasure and restriction. You may object to processing based on legitimate interests. Portability applies to data you supplied which is processed automatically on consent or contract. You may withdraw consent at any time for future processing. This includes support e-mails and data processed for the web test: write to [email protected] and we normally respond within one month. If an extension under the GDPR is necessary, we explain why and for how long within that month. You manage the data in the app yourself, because we do not hold it.
If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the competent authority where you habitually live or work, or where the alleged infringement occurred.
Changes
When the app changes, we update this statement. We announce important changes, such as a new recipient, in the app. The version in force is shown at the top.
