Privacy Policy

RockHobbit (“RockHobbit”, “we”, “us”) runs a UK indoor climbing community website and mobile app that help people find gyms and events near them. This policy explains what data we collect through the website and the app, why we collect it, and the choices and rights you have.

We are based in the UK and this policy is written for UK data protection law (the UK GDPR and the Data Protection Act 2018). If you use RockHobbit from the Republic of Ireland or elsewhere in the EU, the EU GDPR applies to you as well — the same commitments below cover both.

Who we are

RockHobbit is not a registered company — it's run as an independent community project. For any privacy question, request, or complaint, contact:

hello@rockhobbit.com

What we collect, and why

Newsletter subscribers

If you subscribe to the newsletter (from the homepage footer or in the app), we store your email address so we can send you climbing news, gym openings, and event listings. Every newsletter includes an unsubscribe link that removes you immediately. We use a lightweight open-tracking pixel to see aggregate open rates — this is not used to build individual profiles.

Accounts

If you create an account (to manage notification preferences, for example), we store your email address and authentication details via our authentication provider, Supabase, plus any profile information you add. Account holders can request deletion of their account and associated data at any time.

Gym and event submissions

When you submit a gym or event for listing, we collect the details you provide — name, location, description, images, and your contact email if given — and review it before it goes live. Submissions that are rejected or withdrawn are deleted from our active systems within a few months. We don't use submitter contact details for anything other than following up on that submission.

Feedback and bug/feature requests

If you send feedback or report a bug, we store the message and your email address if you choose to give one, so we can follow up. Providing an email is optional.

Push notifications

If you opt in to push notifications on the website or in the app, we store a device/browser notification token so we can send you updates you've asked for (such as new events near you). You can turn these off at any time in your notification preferences or your device settings, which removes the stored token.

Website analytics

We use Mixpanel to understand how people use the directory — for example which pages are viewed and which features get used. If you're signed in, this activity is linked to your account so we can improve the product; if you're not signed in, it's linked to an anonymous device identifier stored in your browser's local storage rather than a cookie. You can ask us to delete this data at any time (see “Your rights” below).

Mobile app permissions

The RockHobbit app may ask for the following device permissions, only when you use the related feature:

• Camera: to photograph a flyer or gym photo when you submit an event or gym. Photos are only uploaded if you choose to submit them.
• Location: to show gyms and events near you, and to pre-fill a location when you submit a gym. You can decline this and browse or search by region instead.
• Calendar (add-only): to add an event to your device calendar when you tap “Save to calendar”. The app can only add events this way — it cannot read your existing calendar.

None of these permissions are used to track you in the background — each one is only accessed at the moment you use the feature it supports.

Who we share data with

We use a small number of trusted service providers to run RockHobbit, who process data on our behalf:

• Supabase — database, authentication, and image storage.
• Resend — sending newsletter and transactional emails.
• Mixpanel — product analytics, to understand how the directory is used.

We don't sell your data, and we don't share it with anyone for their own marketing purposes.

How long we keep data

• Newsletter subscriber emails are kept until you unsubscribe.
• Rejected or withdrawn gym/event submissions are deleted within a few months.
• Accounts that have been inactive for 2 years may be deleted, with a reminder email first.
• Feedback and bug reports are kept only as long as needed to review and act on them.

Your rights

Under UK GDPR, you have the right to:

• Ask what personal data we hold about you, and get a copy of it
• Ask us to correct inaccurate data
• Ask us to delete your data
• Withdraw consent at any time (e.g. unsubscribing from the newsletter or disabling notifications)
• Object to how we process your data

To exercise any of these rights, email hello@rockhobbit.com. If you're unhappy with how we've handled your data, you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Children

RockHobbit is not directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we'll delete it.

Changes to this policy

If we make significant changes to how we handle your data, we'll update this page and change the “last updated” date above.