Privacy Policy

Last updated: October 2026

Who we are

THESTANAGEPROJECT operates stanage.org, account.stanage.org, the STANAGEGO hiker safety app, and the STANAGELOG kit app. We are based in England, UK. Questions about this policy: [email protected].

What this covers

This policy covers the public website, the account site, STANAGEGO, and STANAGELOG, including STANAGELOG PRO. The apps are for people who sign in. The public pages on stanage.org do not need an account. We do not use them to build a profile of you. A light or dark choice stays in your browser.

Signing in

You can sign in with Apple or with Google. The same stanage.org account is used for STANAGEGO and STANAGELOG.

  • Apple. When you use Sign in with Apple we receive an Apple user id. If you choose to share them, we also receive your name and email. The email may be a private relay address. That is an address Apple creates which forwards to you. We do not receive your Apple password. After the first sign-in, Apple may not send your name or email again. We keep the account on the Apple user id, so we do not need the email to recognise you.
  • Google. Sign-in with Google is handled by Google through Firebase. We receive your Google account id, your email, and your name. We do not receive your Google password.

On account.stanage.org we store that email, the name we show, a name you edit, and how you say you will use the app. We also store your plan.

STANAGEGO

When you use STANAGEGO we collect:

  • Account. The Apple or Google details above.
  • Phone number. If you save a number, or you text the service, we store it so we can reply.
  • Trip data. The place name, expected return time, notes, and check-in messages you send.
  • GPS location. Recorded during an active trip so we can follow your route. Stored only if you allow location.
  • Step count and distance. Recorded during an active trip from the phone's motion sensors. Collected only if you allow motion.
  • Emergency contacts. The name, phone number, and relationship you enter. You can save more than one.
  • Device token. Used to send push notifications about your trip. Apple delivers those notifications.
  • Fault reports. If the app hits an error it can send a short technical report: app version, device, screen, and the error. We remove coordinates, grid references, email addresses, and phone numbers before we store it.

We do not collect advertising identifiers or browsing history.

STANAGELOG

When you use STANAGELOG we collect:

  • Account. The Apple or Google details above, and the plan on your stanage.org account.
  • Kit inventory. Item type, serial number or other marks, where it is kept, who it is assigned to, dates, and notes.
  • Folders. Names you give to groups of kit.
  • Inspections. Who checked an item, the date, the result, and any notes.
  • Photos. Pictures you attach to a kit item.
  • Imports. Spreadsheet files you upload so we can add or update kit. We keep a record of the import so you can undo it.
  • Billing. Paid plans, including Personal and STANAGELOG PRO, are billed by Stripe on account.stanage.org. We store the plan, whether the subscription is active, when the period ends, and the Stripe customer and subscription ids. We do not store your card number. Stripe does.
  • Fault reports. If the app hits an error it sends a short technical report: app version, device model, screen, and the error. It does not include your kit details, photos, or passwords.
  • Usage notes. The app can send which screen you were on and what you did, with a device or install id, so we can fix faults. These notes are about the app, not your kit.

How we use your data

For STANAGEGO we use the data to run check-in and check-out, to text your emergency contacts if you are overdue or you call for help, to send push notifications about your trip, to show your trip history, and to turn a text message into a trip record.

For STANAGELOG we use the data to store and show your kit, inspections, photos, and folders, to run your subscription, and to fix faults.

We do not sell, rent, or share your data for marketing.

Third-party services

  • Apple. Sign in with Apple, and push notifications for STANAGEGO. See Apple's Privacy Policy.
  • Google and Firebase. Google sign-in. See Google's Privacy Policy.
  • Twilio. Text messages for STANAGEGO. Your phone number, your emergency contact's phone number, and the message text are sent to Twilio so the text can be delivered. See Twilio's Privacy Policy.
  • Anthropic. When an API key is configured, inbound SMS body text and any trip location parsed from it are sent to Anthropic (Claude) to turn free-text messages into trip records. The message can include a return time or an emergency contact if you wrote them in the text. We may also send your name, phone number, and trip place and times when Claude drafts an overdue alert, and the place name when it drafts a short weather note. If no key is set, messages are parsed on our servers and are not sent to Anthropic. See Anthropic's Privacy Policy.
  • Cloudflare. Network traffic passes through Cloudflare for security and performance. See Cloudflare's Privacy Policy.
  • Stripe. Card payments for STANAGELOG on account.stanage.org. See Stripe's Privacy Policy.

Data retention

We keep your account and the data above until you delete the account or ask us to delete it.

A kit item you delete in STANAGELOG stays recoverable for 30 days, then we remove it. Fault reports from the STANAGELOG app are kept for about 90 days. Usage notes are kept for about 30 days.

STANAGEGO trip history is kept until you delete your account, so you can look back at it. A STANAGEGO fault report tied to your account is removed when you delete the account. A report we could not tie to an account may remain, without your name.

Deleting your account

Delete account in the app (Settings) deletes your account and data immediately. Or email [email protected].

That removes the account from STANAGEGO, STANAGELOG, and account.stanage.org, including sign-in sessions. Any active paid plan, including STANAGELOG PRO, is cancelled in Stripe at the same moment, so you are not charged again.

Your rights

Under UK GDPR you can ask us for a copy of your personal data, to correct it, to delete it, to restrict how we use it, to object to how we use it, and to receive it in a portable form. Email [email protected].

You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint.

Security

Data is sent over HTTPS. On the iOS apps, session tokens are stored in the Keychain. We do not store your Apple or Google password.

Children

STANAGEGO and STANAGELOG are not directed at children under 13. We do not knowingly collect data from children under 13. If you think we have, email [email protected] and we will delete it.

Changes to this policy

We may update this policy. The date at the top is the latest revision.