This policy is not finished and must not be published yet.
6 facts still
need an answer from the project
owner (docs/planning/26c-owner-input.md, Q3 and Q4):
controller.entity, controller.address, controller.jurisdiction, controller.contact_email, retention.uploaded_projects, retention.backups.
They are edited in one place — web/stratilogger/policy.py.
StratiLogger is a graphic-logging tool for geologists. This page says what it holds, where it holds it, and how to get rid of all of it.
The app works offline indefinitely from the moment it is installed. The reference library — patterns, symbols, column templates — ships inside the installer, so nothing has to be fetched before you can log.
Your photographs never leave your device. Photo columns reference pictures where they already sit on the tablet; the app does not copy them and cannot upload them. The server stores text only, and there is no route by which an image could reach it.
Location is recorded only when you ask for it. The Measurement tool has a Capture GPS location button; the permission is requested at that button and never at launch. A captured position is stored in the project file on your device. It reaches the server only if you later choose to upload that project.
No account is needed. Signing in is for publishing a project to a server, and for nothing else.
The server stores two things, and there is no third:
The server does not read what is in them. It stores and returns project files verbatim; the parsing, validating and drawing all happen in your browser or on your tablet. There is no database of log content to search, profile or analyse, and that is an architectural fact rather than a promise about how we behave.
Administrative actions — sign-ins, role changes, deletions — are recorded in an append-only audit log, so that a change to somebody's access can be accounted for afterwards.
Deleting your account deletes your files. Your account row is removed immediately, along with every device token issued to it. Projects that are yours alone are removed from service immediately and permanently erased within 30 days.
Projects you had shared with other people are not destroyed — they lose their owner and stay available to the colleagues you shared them with, who did not ask for their work to be deleted. An administrator can reassign them.
You can do it yourself, from any browser, without installing the app: https://stratilogger.com/account/delete. It shows you exactly which projects are affected before anything happens.
Privacy · Delete your account · StratiLogger 0.1.0