Privacy policy.

Overview

rollnote is a field notebook for film photographers. This policy explains what data we collect, why we collect it, and how we handle it. We collect the minimum necessary to make the app work.

What we collect

• Account data: your email address (used to authenticate you), a username and display name (chosen by you at sign-up), and an optional profile image. The email and display name are encrypted at rest. We do not collect your phone number, address, or any other identifier unless you choose to add it in your shoot notes.
• Shoot and frame data: everything you log in the app - shoot names, dates, camera and film choices, frame settings, GPS coordinates, notes, and attached photos. This data is yours and is stored to provide the service.
• Session data: authentication tokens to keep you logged in, plus the IP address and user-agent of each active session (both encrypted at rest). We use these to detect suspicious sign-ins and to let you revoke sessions. They expire and are invalidated on sign-out.
• Anonymous usage analytics: we run a self-hosted Umami instance to count page views and a few feature events (sign-up, sign-in, shoot/frame created, data exported). Umami does not use cookies, does not store IP addresses, and does not track you across sites. No personal data is sent to a third party.

What we don't do

We do not run advertising pixels or third-party tracking scripts. We do not sell, rent, or share your data with any third party for marketing or profiling. We only disclose data if compelled by a binding legal request.

How we use your data

Your data is used exclusively to operate rollnote - authenticate your account, store and retrieve your shoots, and provide the features of the app. We do not use your shoot data for any purpose other than showing it back to you.

GPS and location data

If you log GPS coordinates on a frame, those coordinates are stored as part of that frame's record. GPS access is always opt-in - you trigger it manually per frame. Location data is never collected in the background.

Data retention

Your data is retained as long as your account exists. If you delete your account from the in-app settings, your user record and all owned content (shoots, frames, personal cameras, lenses, films, etc.) are permanently deleted from the live database in the same operation. Off-site database backups are kept for at most 30 days, after which deleted accounts are gone from backups too.

Your rights

Under the GDPR you have the right to access, rectify, export, and erase your personal data, and to object to or restrict processing. The app gives you direct access to most of these: you can edit your profile, export all your data as a ZIP from the account page, and delete your account permanently from the same page. For anything else, email socials@eliottbidault.fr.

Security

Passwords are hashed by Better-Auth (scrypt with per-user salt). Sensitive columns (email, display name, session IP and user-agent) are encrypted at rest. Authentication endpoints are rate-limited to slow brute-force. All traffic is served over HTTPS with HSTS.

Hosting and processors

The application, database, and analytics are all self-hosted on infrastructure operated by the publisher in the European Union. We use one third-party processor: an SMTP relay used solely to deliver transactional email (account verification, password reset, two-factor codes). No other third-party data processor is involved.

Changes to this policy

If we make material changes to this policy, we will update the date at the top of this page. Continued use of rollnote after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data, or to exercise any GDPR right? Email socials@eliottbidault.fr.