42degrees privacy policy

Last updated: 18 October 2026

42degrees is an app for climbers with a home wall: you photograph your wall, set boulders on it, log your sends, and share the wall with the people who climb on it. This policy explains what data the app handles, why, where it is kept, and what you can do about it.

The short version: we collect what the app needs to work and nothing else. No advertising, no analytics, no tracking, and we never sell your data. We may use wall photos to make hold recognition better, and you can say no to that at any time.

Who is responsible

no caps ventures UG (haftungsbeschränkt), Graf-Landsberg-Straße 37, 59597 Erwitte, hi@nocaps.ventures Imprint: /imprint

What we collect, and why

Your account

To use 42degrees you sign in with your email address. We send you a one-time code to it; there is no password. When you sign in for the first time you choose a username. It is unique: no two accounts share one. Until you choose, it is made from the part of your email address before the @ (never the whole address).

• Your email address is used to sign you in, and to answer you if you write to us. It is never shown to other climbers.
• Your username is shown to the people you share a wall with, next to the sends you log, the boulders you set, the comments you write and the boulders you mark as projects. When you pick one, the app checks whether it is free; that check says only whether a username is taken, never whose it is.

Legal basis: providing the app you signed up for (Art. 6(1)(b) GDPR).

Your walls, boulders and sends

What you create in the app is stored on your phone and backed up to our server, so it survives a lost phone and reaches the people you share it with:

• wall photos you take or pick, how you cropped them, and the wall’s name and angle;
• boulders: which holds you marked, the name, grade, rules, tags and an optional note;
• sends: when you climbed a boulder, how many attempts (or laps) it took, an optional note, an optional grade opinion, and an optional link to a video of it;
• comments: the beta you write on a boulder, and when.

A video link can only point to YouTube or Vimeo. We store the link, never the video: it stays where you posted it, and who may watch it is decided by your settings there. Opening a video link takes you to YouTube or Vimeo (their app or your browser), where their privacy policies apply.

The app only uses the camera and your photo library when you choose to photograph a wall or pick a photo of one, and only uploads the photo you choose.

Legal basis: providing the app (Art. 6(1)(b) GDPR).

Sharing a wall

Walls are private. Nobody can see a wall unless its owner shares an invite code with them. Everyone on a shared wall can see the wall’s photos, every boulder on it, every send logged on it (with its video link, if it has one), the comments on its boulders, and the usernames of the other people on it. A boulder you save as a draft is the exception: only you can see it until you publish it. The owner can remove people from the wall at any time, and can delete any comment on it; anyone can leave a wall.

Improving hold recognition

We are building a feature that finds the holds on a wall photo by itself. To make it work well on real home walls, we may use the wall photos stored on our server, including how they were cropped and the holds marked on them, to develop, test and improve it. This can include training our own recognition models on them.

• We look at the wall and its holds. We do not analyse people, faces or anything else in the picture, and we leave out photos that show people.
• Only we do this. We do not publish your photos, and we do not sell or hand them to anyone else. If we use a service provider for the computing, it works only on our behalf, under a data processing agreement, and is listed under “Where your data is kept”.
• Working copies are deleted when you delete the photo, the wall or your account. A model we have already improved does not contain your photos, and cannot be used to recreate them.

You can object at any time, without giving a reason: email marius@nocaps.ventures and we will stop using your photos for this and delete the working copies. The app works exactly the same either way.

Legal basis: our legitimate interest in improving the app for the people who use it (Art. 6(1)(f) GDPR). It is closely related to why you uploaded the photo in the first place, and you keep the right to object.

Technical data

When the app talks to our server, the server receives technical information such as your IP address, the time of the request, and which kind of request it was. This is needed to deliver the service and to keep it secure, for example against abuse of the sign-in. These logs are kept only for a short period, typically a few days, and are not used to build a profile of you.

Legal basis: our legitimate interest in running a secure service (Art. 6(1)(f) GDPR).

This website

When you visit 42degrees.app, the server that delivers the pages receives the same kind of technical information: your IP address, the time, the page you asked for and what browser you use. It is needed to deliver the pages and keep the site secure, kept only briefly in our hosting provider’s logs, and not used to build a profile of you. The website sets no cookies, runs no scripts and loads nothing from anyone else: its fonts and images come from our own server.

Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f) GDPR).

When you write to us

If you email us, for example to report a problem on a wall or to ask for an early-subscriber code, we use your email address and what you wrote to answer you, and keep it as long as needed for that.

What we do not do

• No advertising and no ad networks.
• No analytics or tracking tools, and no tracking across other apps or websites. (Using wall photos to improve hold recognition, described above, is not tracking: it is about the wall, not about you.)
• No selling or renting of your data to anyone.

Where your data is kept

We use three service providers, who process data only on our behalf and under a data processing agreement:

• Supabase (Supabase Inc.) hosts our database, file storage and sign-in. Your data is stored in the EU, in Frankfurt, Germany.
• Resend (Resend Inc.) sends the sign-in emails. The emails are sent from Amazon’s data centre in Ireland.
• Railway (Railway Corporation) hosts this website, in its data centre in the Netherlands.

All three are US companies. Where data could be accessed from outside the EU, this is covered by the EU Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework.

The app is distributed through Apple’s App Store and Google Play. Apple and Google process data about your download and your device under their own privacy policies.

How long we keep it

• Your account, walls, boulders, sends and comments: until you delete them or delete your account.
• When you delete a wall, a boulder, a send or a comment, it disappears at once for everyone. On the server it is kept, marked as deleted, for 30 days, so that a phone that was offline at the time also learns it is gone. After that it is removed for good, together with any photos, by a clean-up that runs every night.
• Technical logs: a few days (see above).
• Working copies of wall photos used to improve hold recognition: until you delete the photo, the wall or your account, or object.
• Copies in our provider’s backups are overwritten within a short period after that.

Deleting your account

You can delete your account at any time in the app: Account → Delete account. This permanently removes, from our server:

• your account, email address and username;
• every wall you own, with its photos, boulders and every send on it, which also removes those walls for everyone you shared them with;
• the sends you logged, the comments you wrote, the projects you marked and the drafts you saved on other people’s walls.

The boulders you published on other people’s walls stay on those walls, because the people who climb there use them and log sends on them. They are no longer linked to you in any way: your username goes, and what is left is the holds, a name and a grade. The wall’s owner can delete them.

Your account and everything listed above are removed from the database straight away; the photo files follow in the next nightly clean-up, within two days at the latest. The data stored on your phone is removed as well.

Your rights

Under the GDPR you have the right to:

• access the data we hold about you;
• have it corrected;
• have it deleted;
• restrict how we process it;
• receive it in a portable format (data portability);
• object to processing based on our legitimate interest, including the use of your wall photos to improve hold recognition.

To use any of these rights, email marius@nocaps.ventures. You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live.

Children

42degrees is not directed at children under 16, and we do not knowingly collect data from them.

Changes to this policy

If we change what the app does with your data, we will update this page and change the date at the top. For significant changes we will also tell you in the app.