Privacy Policy

Effective 7 August 2026

VectorX is built to keep this policy short: your data lives on your device by default, and we collect nothing about you beyond what the optional account needs to work. The website keeps a tally of how many times each page was asked for — described at the bottom — which records nothing about who asked.

Data you enter

Everything you record in VectorX — load recipes, component inventory, batches, range sessions, and firearm details — is stored locally on the device where you entered it: in an on-device database in the iOS and Android apps, and in your browser's local storage in the web app. If you never sign in, it is not transmitted to us or to anyone else.

Without an account, deleting the app (or clearing your browser's site data) permanently deletes everything you entered — there is no copy anywhere else. Use Settings → Backup → Download a backup to keep your own copy as a single file; it stays entirely in your hands and is never sent to us.

Accounts and cloud sync (optional)

Signing in is optional and exists to enable cloud backup and multi-device sync (a VectorX Pro feature). If you create an account:

• We store your email address, used only to sign you in with one-time codes. Sign-in emails are delivered by our email provider (Resend).
• Your synced reloading records are stored in our database (hosted by Supabase), scoped to your account so only you can read them, and encrypted in transit.
• Target photos you attach to range strings (a Pro feature) are stored in a private storage bucket scoped to your account — only you can view them, and account deletion removes them.
• Pro payments are processed by Stripe; card details go directly to Stripe and never touch our servers. We store only the Stripe customer and subscription references needed to keep your Pro entitlement active.
• No profiling, no marketing use, no sharing — the data exists solely so your own devices can stay in step.

To delete your account and every synced record, use Delete in the app's Account settings, or email [email protected] from the account's address — deletion is immediate and permanent. Any active subscription is cancelled as part of the same step, so a deleted account can never continue to be charged. Signing out on a device only removes access from that device; local data stays local.

One thing deliberately survives deletion: the payment record itself, which stays with Stripe because transaction records must be retained for tax and accounting. We keep nothing about you after deletion — that record lives with the payment processor, not with us.

What we don't do

• No account is required — the full logging app works without one.
• No analytics, telemetry, or crash reporting is embedded in the app.
• No cookies are set by this website, and nothing follows you to any other site.
• No advertising, and no advertising identifiers are used.
• Your reloading data is never sold, shared, or transferred to third parties. (The only third party this site touches at all is YouTube, and only if you play an embedded video — see below.)

Embedded videos

The trailer on the home page and the videos on the tutorials page are embedded from YouTube. They use YouTube's privacy-enhanced mode (youtube-nocookie.com), which means YouTube does not store cookies on your device unless you actually press play. Once you do, YouTube receives your IP address and player activity and applies its own privacy policy, which we do not control. Nothing on this site sends your reloading data to YouTube — the embeds know only that a video on this page was watched.

If you would rather not load anything from YouTube, don't press play; the embeds load no cookies until you do.

Counting visits

We count how many times each page on this website was requested each day, and which website sent the visit — the referring domain only, such as “google.com”, never the full address, because those can contain search terms.

That is the entire record: a date, a page, a domain, and a number. No IP address, no device or browser details, no cookie, no identifier of any kind. Nothing in it is tied to a visitor, and nothing in it could be, even in principle — the rows are tallies, not visits.

It exists so we know whether anyone is finding the site and whether they go on to open the app, which is the difference between building what people want and guessing. It is counted and stored by Cloudflare, which already serves every request to this site, so no further company is involved and no script runs in your browser to do it.

Hosting

This website and the VectorX web app are static files served from a content-delivery network. Like any web server, the hosting and backend providers may keep standard technical logs (such as IP address and requested URL) to operate the service. We add nothing on top of that.

Contact

Questions about this policy: [email protected].