Privacy Policy
Last updated 22 August 2026
Chalk Passport (“we”, “us”) is a climbing log. This page explains what information the app collects, why, who we share it with, and how to reach us. It is written for this product — not as a generic template. If you are in Singapore, this notice is meant to meet our duties under the Personal Data Protection Act 2012 (PDPA).
Who we are
Chalk Passport is a hobby project operated from Singapore. For PDPA purposes, Chalk Passport is the organisation that collects and uses your personal data. There is no separate company name.
Privacy contact (questions, access, correction, or deletion): chalkpassport@outlook.com.
What we collect
- Account. Username, email address, and a password (stored as a hash by our auth provider — we never see the plain password).
- Your stamps. Places you log (gym or rock, city, country, climbing type, grade, date, optional notes) and optional public TikTok, Instagram, or YouTube clip links. Stamp photos are not uploaded to us; clip files stay on those platforms.
- Shared catalog. If you add a new place, other signed-in climbers can see it as unverified until a second climber stamps the same row. After that it is published. Signed-in climbers can report a listing that looks wrong. Reports that a place is closed or fake can hide it from the picker after enough flags (your existing stamps stay on your passport). Other reports help us correct the listing.
- Technical. Session cookies so you stay signed in, plus standard hosting logs (IP address, browser) from the companies that run the site.
How we use it (purpose)
We use this information only to run Chalk Passport: create your account, show your passport, keep the shared list of places usable, send account emails (sign-up confirmation, and recovery if you ask), and fix bugs. We do not sell your personal information. We do not use your stamps for advertising.
By creating an account you agree we may collect and use this information for those purposes. You can withdraw that agreement by deleting your account in the app (Profile → Account → Manage account → Delete account) or by emailing us.
Who can see what
Your visit history is private to your signed-in account. Other climbers cannot browse your stamps. Places and grade charts you add to the catalog are visible to other people using the app (new places start unverified), because the log only works if gyms are shared.
Companies that process data for us (including overseas)
The website is hosted on Vercel. Accounts and the database are stored with Supabase (Postgres and Auth). Those companies may process data outside Singapore, including in the United States. We use them only to operate the app. If you paste a social clip, that platform’s own privacy policy applies to the video.
We send transactional mail only (confirm your address, reset access). Help messages you send from the in-app form go to chalkpassport@outlook.com through your own mail app — we do not store that form in our database.
How long we keep it
We keep your account and stamps while the account exists. If you delete the account (in the app or by emailing us), we delete your Auth user, profile, and stamps, unless we must keep a limited record to handle abuse or a legal request. Shared catalog rows (a gym someone else still uses) may remain with your user id removed where we can do that safely.
Your PDPA rights
You can edit or delete stamps in the app. You can delete the whole account from Profile → Account → Manage account. You can also email chalkpassport@outlook.com to:
- ask what personal data we hold about you (access)
- correct username or password in the app (Profile → Account → Manage account)
- correct your email by writing to us
- ask us to delete the account if you cannot use the in-app button
We will handle these requests as soon as we reasonably can. If you are not satisfied, you may contact the Personal Data Protection Commission (PDPC) in Singapore.
If you are in the UK or EEA, you may also have rights under UK GDPR / GDPR, including complaint to a supervisory authority there.
Children
Chalk Passport is not directed at children under 13. Do not create an account if you are under 13. If you believe a child has signed up, email us and we will delete the account.
Changes
If this policy changes in a meaningful way, we will update the date above. Keep using the app after a change means you accept the updated policy.