Who the controller is

The data controller is Lasse Feddersen, trading as a sole trader. Contact: support.

This website

There is no analytics script, no advertising tracker and no cookie set by us. The site is hosted on Cloudflare Pages, which sees the technical request data any web host sees (your IP address, the page asked for) to deliver the page. The checkout, which only loads when you press Buy, is Paddle’s and sets what Paddle needs to take a payment.

The app

Remate runs on your watch. The settings, the day the trial started and the match in progress are stored on the watch. The app has no internet connection of its own and sends nothing to us. When you save a match, it goes to Garmin Connect under Garmin’s terms and privacy policy, not ours.

When you buy

Paddle collects what it needs to take the payment and handle tax (name, email, country, payment details) and is the controller for that under its own privacy policy. We receive your email address and the transaction details so we can make your key and send it to you.

When you unlock a watch

The unlock page sends your key, the product name and the watch code to our licence service, which runs on Cloudflare Workers. The watch code is a short code the app derives from the watch’s identifier with a one-way hash; we cannot get the watch’s identifier back from it. We store it against your key, to count the watches a key has unlocked (three at most). Short-lived counters per IP address limit repeated requests; they are cleared after two days.

The same service sends the recovery email when you ask for your key again. The answer is identical whether or not the address is known.

How long we keep things

Licence records — email address, key, transaction and watch codes — are kept for as long as the licence exists and for six years afterwards, because tax law requires the transaction records to be retained. Support emails are kept for two years and then deleted.

Your rights

If you are in the UK or the EU, you have the right to ask what we hold about you, to have it corrected, to have it deleted, to object to processing and to receive it in a portable form. Email us and you will get an answer from a person within thirty days. Purchase records that tax law requires us to keep are the one thing we cannot delete on request, and we will tell you plainly if that applies.

You may also complain to your national data protection authority.