What the book keeps.

Summitry is a summit register. It stores what you write into it and as little else as it can. This page says what that is, where it lives, and how to take it out again.

Your account

You sign in with Apple, Google or an email link. We keep the identifier the provider gives us, your email address, your display name and, if you set them, a handle, an avatar, a short bio and a home region. We never see a password. Apple or Google learn that you signed in to Summitry, and nothing more. Before you sign in, your book lives on the phone alone; it moves into your account the first time you do. If you add a profile picture, it is stored at a public address so the app can show it wherever your name appears; the address needs no sign-in, but the picture is shown only where your profile is. Summitry is for people aged 16 and over; if you are younger, do not create an account.

Your entries

A signature stores the summit, the time, your position and its accuracy at the moment of signing, the activity, a note, the conditions you reported, the companions you named and any photos you added. Each entry has a visibility: public, followers, or only you. A verified signature and a summit found in a GPX file start with the default you choose in Settings (public, unless you change it); a summit found in a Strava activity stays private unless you have allowed Strava ascents into the register; a claimed entry, including the copy you get when you confirm a friend's tag, is always private. Any other entry's visibility can be changed on its page.

Location

The app reads your location while the Map or the Sign tab is open, to show what is near you, and while you sign, to confirm that you are on the summit. Only the signing position is stored, with its entry. Nothing is read in the background, and the app never stores where you live.

Maps

The map's tiles, and the ridge lines drawn on a shared picture, come from our own host, tiles.summitry.app: files on Tigris, a storage network with servers around the world, which serves each file from the server nearest you and caches it there. A region you download is read from the phone afterwards, and nothing is sent while you look at it. While a map streams, the host sees your IP address and which files you ask for, keeps ordinary access logs for a short time, and links none of it to your account. The files themselves hold no personal data.

Strava and GPX files

If you connect Strava, you grant Summitry read access to your activities, private ones included (Strava's activity:read_all permission). We read each activity's summary and GPS track to find the summits it crossed, and keep the moment you were on each one, the metres climbed and the activity's id, so nothing is imported twice. The tracks themselves are not kept. The connection tokens live only on our server and never reach the app. Finds wait in your inbox; a find from Strava is private after you confirm it unless you have turned on “Show entries from Strava in the register” in Settings, and then it takes your default visibility like any other entry. Strava data is shown to nobody but you until you allow that, per entry or with that switch. Disconnecting in Settings revokes the access at Strava and deletes the tokens, open jobs and unconfirmed finds. Entries you confirmed are yours and stay in your book until you delete them. A GPX file you import is uploaded to our server, read once for the summits its track crossed and deleted from the server as soon as it has been read; what stays is what was found, and a fingerprint of the file so the same file adds nothing twice, never the track.

Other people

A public entry, and your profile with its map and stats, can be seen by anyone signed in to Summitry; a followers entry by the people who follow you; a private one by you alone. Summit pages and the official lists can be read without an account; your entries on them cannot. A comment you leave on someone's entry carries your name. When you name a companion, you either type a name, stored as the words you wrote, or pick a person who has an account: then your entry appears in their inbox with your name, and they decide whether a private copy goes into their book or decline, after which the tag is plain words again. Nobody is tagged without a way to say no. A list you make public can be seen and followed by anyone signed in, with your name on it. You can block a person from the app (neither of you then sees the other's entries, comments or lists, and neither can follow or tag the other) and report an entry, a comment or a profile. A report is mailed to us with your handle, the handle behind what you reported and the words in question; we alone read it, and the person it concerns is not told who sent it.

Notifications

If you turn notifications on, the app stores a token for your phone, and a message — a friend's tag, a comment on your entry, a new follower, finds to review — travels through Expo's push service (Expo, in the US) to Apple or Google, who deliver it. A message carries at most a name and a summit's name. Each kind has its own switch in Settings; signing out or deleting the account removes the token.

Where it lives

The database, your photos and the sign-in records are hosted with Supabase in Frankfurt, Germany. Sign-in emails, and the mail a report produces, go out through Resend. Mail to support@summitry.app reaches us through ImprovMX, a forwarding service in the EU. Crash reports and the app's error lines go to Sentry, hosted in Frankfurt. Notifications pass through Expo's push service in the US. This website runs on Fly.io in Frankfurt; the map, skyline and picture files sit on Tigris, a storage network with servers worldwide, and hold nothing personal. Nothing is sold, shared with advertisers, or used to build a profile of you.

Why we may

We process this because you asked for a book (that is the contract between us), because you chose it (your location, your photos, a Strava connection, notifications: each is a permission you can withdraw), and, for the server logs and crash reports, because a service has to be kept running and repaired (a legitimate interest, in the law's words). Nothing is used for anything you would not expect from a summit register.

How long

Your book stays as long as you keep it: an entry until you delete it, the account until you delete that. Strava tokens stay until you disconnect; a phone's notification token until you sign out or delete the account. Support mail is kept while the conversation takes. Server logs are kept for a short time; crash reports for 90 days and error lines for 30. A report you sent stays with the decision taken on it. Database backups are overwritten after a set number of days. When you delete the account, the profile, every entry, photo, follow, comment, list, block, report and connection goes at once; a record of a moderation decision stays, without your name.

Analytics and cookies

The app sends no usage analytics and contains no advertising or tracking SDKs; crash reports, below, are the one thing it sends about itself. If we add analytics later, they will run on servers in the EU, count which screens are used rather than what you write, be anonymous where possible, and come with a switch in Settings to turn them off. This page will change before that does.

This website sets no cookies and runs no analytics or third-party scripts. Its fonts and images are served from Summitry itself. The web server keeps ordinary access logs, including IP addresses, for a short time to keep the site running.

Crashes and support

When the app crashes or something in it fails, it sends a report to Sentry, an error-reporting service hosted for us in Frankfurt: what went wrong and where in the code, the phone's model and system version, the app's version, the steps the app took just before, and your account's id, so that we can find the report when you write to us. It never carries a note, a name, a position or a photo, and no screenshot. Reports are kept for 90 days. It is the one thing the app sends without asking, and the reason a crash you never write to us about still gets fixed. If you write to support, we keep the conversation for as long as it takes to help you, and nothing else.

Your rights

Everything the book holds about you is in the app. You can export it, correct it, and delete your account with every entry and photo in it, all from Settings. Deletion is immediate and cannot be undone. You can also ask us for a copy of your data, a correction or a deletion, or object to a use, and you can complain to a data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country. For anything else, write to support@summitry.app.

How to delete the account, and what goes with it, is also on its own page: summitry.app/delete-account.

Who is responsible

Mareike Haug, 8048 Zürich, Switzerland. See the imprint.

Last changed 20 September 2026.