Privacy Policy

Last updated: 9 April 2026

BoulderPad is a bouldering logbook for iOS and Android. This policy covers both the BoulderPad app and this website (boulderpad.com). It explains what data we collect, why, and how we handle it — in plain English, in accordance with the UK GDPR, EU GDPR, and other applicable data protection law.

Who we are

BoulderPad is operated by Yik Han Siah, based in the United Kingdom. For the purposes of data protection law, we are the data controller.

Contact: hello@boulderpad.com

This website

This website does not collect any personal data. There are no forms, no accounts, and no cookies. We use Vercel Analytics to measure aggregate page views — this is covered in the “Cookies and tracking” section below.

The BoulderPad app

Your climb data stays on your device

BoulderPad is offline-first. Your climb sessions, grades, and progression data are stored locally on your device and are never uploaded to any server. We do not have accounts, cloud sync, or any backend that receives your climbing data.

Crash reporting (Sentry)

When the app crashes or encounters an unexpected error, we collect a crash report to help us find and fix the bug. This report may include:

  • Device type and model
  • Operating system version
  • App version
  • Error message and stack trace
  • App state at the time of the crash (e.g. which screen was open)

Crash reports do not include your climb data, and do not contain information that identifies you personally.

Crash reporting is handled by Sentry (Functional Software, Inc.), acting as a data processor under a Data Processing Agreement. We use Sentry's EU-hosted infrastructure: crash data is sent to and stored on servers in the European Union (ingest.de.sentry.io). No transfer outside the EU occurs for this data.

Sentry's privacy policy: sentry.io/privacy

Legal basis: Legitimate interest (Article 6(1)(f) UK GDPR / EU GDPR). Detecting and fixing crashes is necessary to provide a functioning app — this is in both our interest and yours. Crash reports contain no climbing data and are retained only as long as needed to diagnose and resolve issues.

Your rights

Under UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your data
  • Restriction — ask us to limit how we process your data
  • Portability — receive your data in a portable, machine-readable format
  • Object — object to processing carried out under legitimate interest
  • Withdraw consent — withdraw consent at any time (for processing based on consent)

To exercise any of these rights, contact us at hello@boulderpad.com. We will respond within one month.

California residents

If you are a California resident, the CCPA/CPRA may give you additional rights. We do not sell or share your personal information as defined under California law. This website does not collect personal data. Crash data collected by the app does not identify you personally and is not sold or shared for commercial purposes.

Cookies and tracking

This website uses Vercel Analytics to measure aggregate page views. No cookies are used, no IP addresses are stored, and no persistent identifiers are created. Data is collected in anonymised, aggregate form only.

The app does not use advertising SDKs or behavioural tracking for advertising or profiling purposes.

Supervisory authorities

If you are in the UK and have a concern about how we handle your data that we have not resolved to your satisfaction, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

If you are in the EU, you have the right to complain to the data protection authority in your country of residence.

Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will reflect any changes.