Privacy Policy

This is the Privacy Policy of Bergkönig (bergkoenig.app). For questions, contact: claudio.scheiwiller@bergkoenig.app

Last updated: March 2026

1. Data Controller

Claudio Scheiwiller
Schöntalweg 10
6992 Hirschegg, Austria
Email: claudio.scheiwiller@bergkoenig.app
Alternative: claudio-sch@hotmail.com

2. What Data We Collect

During registration, we collect:

Email address (for login and communication)
Username (publicly visible on the leaderboard)
Password (stored encrypted, not visible to anyone)
Avatar selection (emoji)

During app usage, we store:

Summit ascents (peak ID, timestamp, points)
Game progress (points, crowns, badges)

3. Strava Data Processing

Connecting with Strava is optional. Bergkönig is not a Strava app — Strava is an optional data source.

When you connect your Strava account:

We receive access to your activities (Scope: activity:read_all)
We process only GPS coordinates and elevation data for summit detection
GPS tracks are NOT stored — only derived data (which peak, when, elevation gain)
Your Strava name and profile photo are not displayed in Bergkönig
Strava tokens are stored encrypted in our database

Disconnect Strava: You can disconnect at any time in Settings. This will:

Delete all Strava tokens from our database
Revoke the authorization at Strava (Deauthorize API)
Your existing points and ascents will be preserved

Bergkönig is not operated, endorsed, or certified by Strava, Inc. Strava® is a registered trademark of Strava, Inc. See also: Strava Privacy Policy

3b. Garmin Connect Data Processing

Connecting with Garmin Connect is optional.

When you connect your Garmin account:

We receive webhook access to your activity data (GPS coordinates, elevation data)
We process only GPS coordinates and elevation data for summit detection
GPS tracks are NOT stored — only derived data (which peak, when, elevation gain)
Your Garmin name and profile photo are not displayed in Bergkönig

Disconnect Garmin: You can disconnect at any time in Settings. All Garmin tokens will be deleted from our database.

Bergkönig is not operated or endorsed by Garmin Ltd. Garmin® is a registered trademark of Garmin Ltd.

3c. Suunto Data Processing

Connecting with Suunto is optional.

When you connect your Suunto account:

We receive API access to your workout data (GPS coordinates, elevation data)
We process only GPS coordinates and elevation data for summit detection
GPS tracks are NOT stored — only derived data
Your Suunto name and profile photo are not displayed in Bergkönig

Disconnect Suunto: You can disconnect at any time in Settings.

Bergkönig is not operated or endorsed by Suunto Oy. Suunto® is a registered trademark of Suunto Oy.

3d. GPX/CSV Upload

You can upload GPS tours as GPX or CSV files. The GPS data is only processed for summit detection and is not stored. Only detected summit ascents (peak ID, timestamp, elevation gain) are stored in the database.

4. Legal Basis

Your data is processed on the basis of:

Consent (Art. 6(1)(a) GDPR) — during registration
Performance of a contract (Art. 6(1)(b) GDPR) — to provide the game service

5. Data Storage

Your data is stored with:

Supabase (database, authentication) — servers in the EU (Ireland)
GitHub Pages (website hosting) — static files

We do not share data with third parties, except with Strava, Garmin, or Suunto when you activate the respective connection.

6. Your Rights (GDPR)

You have the right to:

Access — know what data we have stored about you
Rectification — have incorrect data corrected
Erasure — delete your account and all data (in Settings)
Data portability — receive your data in a machine-readable format
Withdrawal — withdraw your consent at any time

7. Account Deletion

You can permanently delete your account at any time in Settings. The following will be irrevocably deleted:

All summit ascents and points
Your profile and username
All badges and crowns
Strava connection (deauthorized at Strava)
All Garmin Connect tokens
All Suunto tokens
Your authentication account

8. Cookies

Bergkönig uses no tracking cookies and no analytics tools (no Google Analytics, no Facebook Pixel). We only use technically necessary session tokens for authentication.

9. Contact

For privacy-related questions:
claudio.scheiwiller@bergkoenig.app
claudio-sch@hotmail.com