Privacy policy

Ride Web Analyzer

The Ride Web Analyzer reads an exported file in your browser; the file itself is never uploaded, and a ride leaves your device only if you share it by link (see below). To draw the map, your browser downloads map tiles from OpenStreetMap, which therefore sees which map area is displayed (OSMF privacy policy). The map library is served from this website too.

Remember ride

If you switch on "Remember ride" in the Ride Web Analyzer, the last ride or comparison you opened (the file; a ride opened from a shared link is not kept) and where you were in it are kept in your browser's own storage on your device, so they come back when you open the analyzer again. Nothing of it is uploaded. Switching the option off erases it; clearing your browser data does too.

Weather of a ride

The Ride Web Analyzer can score a ride and allow for the weather it was ridden in. Only if you switch on "Load weather" in its Ride score card, your browser asks Open-Meteo (Open-Meteo.com, an open weather service) for the weather at the time of the ride: it sends the position of the middle of the ride rounded to about 1 km and the date, nothing else; the ride itself is not uploaded. Open-Meteo sees your IP address as any website does (Open-Meteo terms and privacy). The weather summary is kept in your browser's own storage with the date and the rounded position, and goes with a ride you share by link together with its map. You can switch it off again in the same card.

Sharing a ride by link

If you choose "Share link" in the Ride Web Analyzer, your browser first encrypts the ride (time, lean angle, speed and, if you leave the map on, the GPS track; by default the first and last 300 m are removed). The encrypted file also holds the type of motorcycle, what recorded the ride and, only while they stay ticked in the sharing dialog, the name you set in the app (ticked by default) and the ride's note (not ticked by default). Only this encrypted file is uploaded and stored on Cloudflare R2 (Cloudflare, Inc. processes it for us as hosting provider). The key needed to read it is only in the part of the link after "#", which browsers never send to a server, so neither we nor Cloudflare can read the ride.

If you tick "Show the ride score in the link preview", the score (a number and one word for the style) is stored with the file unencrypted, so that the link preview can show it. Anyone you give the link to can view it. Shared rides are deleted automatically after 30 days, and you can delete one earlier with "Stop sharing" in the same browser.

To limit abuse, a counter of uploads per hour is kept under a one-way hash of your IP address and the day; the IP address itself is not stored with the shared ride. The links you created and what is needed to stop sharing them are kept in your browser's own storage on your device ("My shares"), until the shared ride expires or you stop sharing it.

Contact form and e-mail

If you send us a message with "Contact" in the Ride Web Analyzer, we store the message, the e-mail address if you enter one (only so that we can reply), the time and the language of the viewer, on Cloudflare R2 as above. We use it only to read and answer your message. We reply from admin@cornerlog.app through Gmail (Google LLC provides the e-mail service and processes your address and our reply under its own privacy policy) and keep our reply with your message. The message is deleted automatically 30 days after you send it or, if we reply, 30 days after our last reply.

To limit spam, a counter of messages per hour is kept under a one-way hash of your IP address and the day; the IP address itself is not stored, and the counter is deleted after 30 days too. An e-mail you send straight to admin@cornerlog.app is stored and answered the same way, with its subject and without its attachments.

Server access

Like any website, Cloudflare processes the IP address and the technical details of each request to deliver the website and protect it from attacks. We keep no access logs with IP addresses ourselves; we only see aggregated visit counts.

Controller

Walker & Volf s.r.o.
Registered office: Vysokovská 2009/28, 193 00 Praha 9 – Horní Počernice, Czech Republic
Company ID (IČO): 02880296, VAT: CZ02880296
Registered in the Commercial Register kept by the Municipal Court in Prague, file C 224798
Correspondence address: Podnikatelská 539, 190 11 Praha 9 – Běchovice, Czech Republic
E-mail: admin@cornerlog.app
Web: www.cornerlog.app

We have not appointed a data protection officer; the law does not require one for the processing we do. Please send any question or request about your personal data to the e-mail address above.

What we process, why, and on what legal basis

• A ride shared by link. The encrypted ride file, the unencrypted ride score if you chose to show it in the link preview, the time of upload and a one-way hash of your IP address and the day (upload limit). Purpose: to provide the shared link you asked for and to protect the service from abuse. Legal basis: performance of the service you requested (Art. 6(1)(b) GDPR) and, for the upload limit, our legitimate interest in preventing abuse (Art. 6(1)(f)). We cannot read the ride itself: the key is only in your link.
• Contact form and e-mail to admin@cornerlog.app. Your message, your e-mail address if you give one, the subject, the time and the language of the viewer, our reply, and a one-way hash of your IP address and the day (spam limit). Purpose: to read and answer your message. Legal basis: our legitimate interest in answering the people who write to us (Art. 6(1)(f)); where your message is about a purchase or a problem with the app, also taking steps at your request (Art. 6(1)(b)).
• Server access. The IP address and the technical details of every request, processed by Cloudflare. Purpose: to deliver the website and protect it from attacks. Legal basis: our legitimate interest in a secure and working website (Art. 6(1)(f)).

Giving us personal data is voluntary. The e-mail address in the contact form is optional; without it we just cannot reply. We do not use automated decision-making or profiling, we send no newsletters and we use no advertising, analytics or tracking cookies.

How long we keep it

• A shared ride: 30 days after the upload, or until you cancel the sharing.
• A message to us: 30 days after you send it or, if we reply, 30 days after our last reply. Copies of our replies stay in our e-mail mailbox until we delete them, at most for as long as we need them to deal with your request.
• The IP hash counters for upload and spam limits: 30 days.

Who else handles the data

• Cloudflare, Inc. (USA) hosts this website, stores shared rides and messages (Cloudflare R2) and routes e-mail to admin@cornerlog.app. It processes the data for us as our processor under its Data Processing Addendum.
• Google LLC (USA) runs Gmail, the e-mail service we use to send our replies; replies, your address and occasionally an incoming e-mail pass through it. Google provides this service under its own terms and privacy policy.
• OpenStreetMap (map tiles) and Open-Meteo (ride weather, only if you turn it on) are contacted directly by your browser when you use the Ride Web Analyzer. We send them nothing; they see your IP address and the requested map area or rounded location under their own policies (see above).

We do not sell personal data and do not give it to anyone else, unless the law requires it (for example a court or a public authority).

Transfers outside the EU

Cloudflare and Google are based in the USA, so data may be processed there. Both companies are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision; Cloudflare's Data Processing Addendum also includes the European Commission's Standard Contractual Clauses.

Your rights

Under the GDPR you have the right to:

• get confirmation whether we process your personal data, and a copy of it (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17), for example a message you sent us or a shared ride;
• have the processing restricted (Art. 18);
• receive data you gave us in a common machine-readable format (Art. 20);
• object at any time to processing based on our legitimate interest (Art. 21).

Write to admin@cornerlog.app, if possible from the address you used to contact us, so that we can tell the data is yours. We answer within one month and free of charge. A shared ride you can also delete yourself with "Stop sharing" in the browser you shared it from.

Complaints and changes

If you think we process your personal data unlawfully, you can lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. Our supervisory authority is the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, uoou.gov.cz. We would be glad if you told us first, so that we can put it right.

Changes to this policy are published on this page.