Privacy Policy

1. Who we are

Sportsmen Ledger is published by Elliott and Sons Consulting LLC, 810 Kempton Ct., Wheatland, CA 95692, United States. Questions about this policy go to Billy@sportsmenledger.com.

2. What we collect

Without an account, nothing. The app contains no analytics, telemetry, advertising identifier, crash reporter or third-party tracking software of any kind. We do not know how many people use the app, which screens they open, or what they put in it.

With an account, we hold only what the account needs:

• Your email address, and your password as a one-way hash that Google Firebase keeps for sign-in
• An encrypted copy of your wallet, which we cannot read (section 3)
• When the copy was last saved, its size, and the kind of device that saved it (for example “iPhone”)
• The sign-in records Google keeps to run and protect the service, such as the time and IP address of a sign-in

3. What the app stores, and where

The app stores the following in your device’s own browser storage, under a single key. It is not transmitted:

• Your name, date of birth and home state
• License copies: state, kind, number, dates and holder
• A photograph of your identification, if you choose to take one
• Harvest records, including photographs, measurements, method and the license each is filed against
• Saved pins, gear lists, trip plans, reminders and alert settings
• Certifications, competition entries, emergency contacts and app preferences

This data is readable by the app on that device and by nothing else. Without an account it is not backed up to us. If you clear your browser’s site data or delete the app, it is permanently gone unless you have exported a backup or saved it to an account.

Your account and sync (optional)

If you create an account in the app or on this website, the app keeps a copy of your wallet in Google Firebase so it can appear on another phone and on the Account page of this website. Before the copy leaves your phone it is encrypted with a key made from your password (PBKDF2-SHA256 at 310,000 iterations, then AES-GCM-256). The password and the key stay on your devices. What we store is unreadable without your password, to us and to anyone who got into the storage.

The copy holds everything a backup holds: your profile, licenses and their photographs, harvest records and photographs, trophy room, certifications, pins and settings. The photograph of your identification is never included.

If you reset a forgotten password, the stored copy cannot be opened with the new one. The next time you sign in to the app with the new password, the app replaces it with a new copy locked by the new password. Your phone’s own copy is not affected.

Backups

You can export your wallet to a file. That file is encrypted with a passphrase you choose, using PBKDF2-SHA256 at 250,000 iterations to derive an AES-GCM-256 key. The passphrase is not stored in the app and is never transmitted. We cannot recover it and we cannot open your backup. Where you then keep that file is your responsibility.

4. What leaves your device, and to whom

The app makes outbound requests only for the features below, only when you use them, and always directly from your device to the organisation named — never through us.

The requests to government services are made with credentials omitted, meaning no cookies are attached. Your name, your license details, your photographs and your harvest log are never included in any of them. They reach Firebase only inside the encrypted copy, and only if you have an account. Once a request reaches a government service, that agency’s own privacy practices apply, not ours.

5. Location

The app asks for your location only when you tap something that needs it — a forecast, a pin, finding the unit you are standing in, or the emergency screen. You can refuse, and type coordinates instead. Your location is used on the device and, where a forecast or boundary is involved, sent to the government service named above. It is never sent to us in readable form. Pins you save travel inside the encrypted copy of your wallet if you have an account.

6. Camera

The camera is used for three things: photographing your identification, photographing a harvest, and reading the barcode on a license. All three happen entirely on the device. No image is uploaded anywhere, except inside the encrypted copy of your wallet if you have an account. Your ID photo is never uploaded.

7. Children

Sportsmen Ledger is intended for people aged 16 and over. A holder under 16 is recorded under a parent or guardian’s wallet, with a consent toggle that gates the hunting path. Accounts are for people aged 16 and over, and we do not knowingly create one for a younger child.

8. Selling and sharing

We do not sell personal information, share it for cross-context behavioural advertising, or disclose it to anyone. Without an account we have none; with one, we hold an email address and a copy we cannot read. There is no data broker relationship, no advertising network and no third-party software development kit in this app.

9. Your rights

California residents have rights under the CCPA and CPRA to know what personal information a business holds, to delete it, to correct it and to opt out of its sale or sharing. Residents of other states and countries have comparable rights under their own laws.

Without an account, we hold no personal information about you: delete the app or clear its site data and everything is gone. With an account, choose Delete my account in the app or on the Account page of this website. That deletes your account and the stored copy of your wallet at once, and we keep no other copy. You can also write to Billy@sportsmenledger.com and we will do it for you and confirm it in writing.

10. Subscriptions

Subscriptions are not open at the time of writing. When they open on iPhone they will be handled by Apple through its own purchase system. In that case Apple processes the payment and holds the billing relationship; we receive no card number and no billing address from Apple. Any address you type into the app for billing purposes is held on the device like everything else until a payment processor is connected, at which point this policy will be updated and dated before that happens.

11. Changes to this policy

If this policy changes the date at the top changes with it. If a change ever means the app starts collecting something it did not collect before, that will be stated plainly here and in the app, not folded into a paragraph.

12. This website

Everything above is about the app. This website, sportsmenledger.com, is hosted by Squarespace, and Squarespace holds none of your app data. The Account page fetches your encrypted wallet from Google Firebase and opens it inside your own browser with your password. Nothing it shows is stored by the website.

Like any website, it receives the ordinary details of a visit: your IP address, your browser and device type, the page you came from and the pages you view. Squarespace processes these to run and protect the site and to give us visitor counts, which we see only as totals. Squarespace’s own privacy policy covers how it handles them.

The site sets the cookies it needs to work. It sets analytics cookies only if you accept them in the cookie banner, and it sets no advertising cookies. The language you pick is saved in your own browser and is not sent to us.

If you email us, we receive your address and your message, and use them only to reply.

13. Contact

Elliott and Sons Consulting LLC
810 Kempton Ct.
Wheatland, CA 95692
Billy@sportsmenledger.com