Log in

Privacy

Last updated: 18 October 2026

This notice explains what CoasterLog collects about you, why, who else handles it, and what you can do about it. We've tried to keep it short and plain.

Who we are

CoasterLog is run by Ollie H, an individual in the UK. Ollie H decides how your data is used (the "controller" under UK data protection law).

For anything about your data, email privacy@ollieh.dev.

What we collect

When you sign up: your email address and a password. We only store a scrambled (hashed) version of your password, so nobody can read it.

Your profile: your username, display name, and anything you choose to add: a bio, a profile photo, your home country and the year you started riding.

Your log: the coasters you've ridden, when you rode them (if you say), your rankings and any notes.

Your settings: units, theme, which emails you want, and your privacy choices.

When something breaks: error reports with technical details about what went wrong (see Sentry below).

Running your account: when you're signed in, a record of each signed-in device session (so you can sign out other devices), the time your email was confirmed, and which automatic emails we've sent you, so we don't send them twice.

We don't collect your location, contacts or payment details, and we don't use analytics or advertising trackers.

Why we use it

  • To run CoasterLog for you (the lawful basis is our agreement with you: the Terms). This covers your account, your log, your stats and your profile.
  • To keep it safe and working (legitimate interests). We use it to confirm your email, reset your password, stop abuse, and fix problems. When you report a bug, an admin may view CoasterLog as you to see what you see. Every time this happens it's logged with the reason, and it's never used for anything else.
  • To send you emails. Account emails (confirming your address, resetting your password) are part of the service. Milestone and season-wrapped emails are on by default and switch off in Settings or from the link in each email (legitimate interests). Product news is off unless you turn it on (consent).

Who can see it

Other riders. If your profile is public, anyone can see your username, display name, bio, photo, credits, rankings and stats at your profile address. Ride dates show as month and year unless you choose exact dates. Turn your profile off in Settings and only you see your log. You can also ask search engines not to list your profile.

The services we use. These companies handle data on our behalf, under contract, and only for these purposes:

  • Vercel: hosts the app and stores profile photos.
  • Neon: hosts the database, in London.
  • Plunk: sends our emails.
  • Sentry: records errors and slow pages so we can fix them, in the EU. It gets technical details (the page, the error, your browser and device type), not your name, email or account.

Some of these are based outside the UK, or may process data there. Where data leaves the UK, it's protected by safeguards UK law recognises, such as the UK–US data bridge or standard contractual clauses.

We never sell your data or share it with advertisers.

The coaster and park information comes from Coasterpedia. Nothing about you is ever sent to them.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile, log and settings are deleted straight away. Copies in our database provider's short-term backups disappear within a few days.

Some things clear themselves sooner. Email confirmation codes expire after 15 minutes, and signed-in sessions expire after 30 days.

Cookies and local storage

We only use what's strictly needed to make CoasterLog work, so there's no cookie banner:

  • payload-token: a cookie that keeps you signed in. It lasts up to 30 days and can't be read by scripts.
  • Admin cookies: only in an admin's own browser, while they're viewing CoasterLog as a rider to fix a problem.
  • theme: stored in your browser (not a cookie) to remember light or dark mode.
  • cookie-note-dismissed: stored in your browser (not a cookie) once you've closed the note about cookies, so it doesn't keep coming back.

No analytics, advertising or tracking cookies.

Your rights

You can:

  • See and download your data: Settings → Privacy & data → Export (CSV or JSON).
  • Correct it: edit your profile and log at any time.
  • Delete it: clear your log in Settings → Privacy & data, or delete your whole account in Settings → Account.
  • Object or ask us to limit how we use your data, or ask for a copy we haven't covered here, by emailing privacy@ollieh.dev.

We'll reply within a month. If you're unhappy with how we've handled your data, please tell us first, but you can also complain to the Information Commissioner's Office at ico.org.uk.

Age

CoasterLog is for people aged 16 and over. If we learn that someone younger has signed up, we'll delete the account.

Changes

If we change this notice, we'll update the date at the top. If it's a change that matters, such as a new service handling your data, we'll tell you by email or in the app first.