Privacy Policy

We take the protection of your personal data very seriously. This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our online offering. We adhere to the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Data Controller

The data controller within the meaning of Article 4(7) GDPR is:

ThrowSense — Einzelunternehmen (sole proprietor)
Wilm-Hendrik Schulz
Wattweg 27
26524 Hage, Germany
info@throwsense.de

2. Data We Collect

When you use ThrowSense, we may collect and process the following personal data:

• Account data: username, email address, encrypted password
• Third-party platform credentials: encrypted access tokens or credentials used to retrieve match data from supported platforms (e.g. AutoDarts), stored securely and used exclusively for data import on your behalf
• Match data: game statistics imported from supported platforms (throw data, scores, match results)
• Usage data: page visits, login timestamps, IP addresses (for security and rate limiting)
• Contact form data: name, email address, and message content when you contact us

3. Purpose of Processing

We process your data for the following purposes:

• Providing and operating the ThrowSense analytics platform (Art. 6(1)(b) GDPR — contract performance)
• Importing and analysing your dart match data from AutoDarts (Art. 6(1)(b) GDPR — contract performance)
• Account management and authentication (Art. 6(1)(b) GDPR — contract performance)
• Security, fraud prevention, and rate limiting (Art. 6(1)(f) GDPR — legitimate interest)
• Responding to contact form enquiries (Art. 6(1)(b) GDPR — pre-contractual measures)
• Aggregated usage statistics for service improvement (Art. 6(1)(f) GDPR — legitimate interest)

4. Data Storage & Security

Your data is stored on a secured server. Third-party platform credentials are encrypted using industry-standard Fernet symmetric encryption before storage. Passwords are cryptographically hashed. We employ HTTPS, session hardening, rate limiting, and security headers to protect your data.

5. Data Retention

We retain your personal data only for as long as necessary for the purposes stated above, or as required by law. When you delete your account, all personal data including match statistics, credentials, and settings are permanently removed from our systems.

6. Data Sharing with Third Parties

We do not sell or trade your personal data. Personal data is only shared with third parties where necessary to provide the service (e.g. server hosting, API communication with supported platforms such as AutoDarts for match data import). No personal data is transmitted to third-party analytics, advertising, or marketing services.

7. Data Processors

To operate the service, we may use technical service providers (e.g. hosting, infrastructure) who process data on our behalf under strict contractual obligations in accordance with Art. 28 GDPR. These processors do not use your data for their own purposes.

8. Cookies & Sessions

ThrowSense uses a session cookie that is technically necessary for authentication and language preferences. This cookie does not track your behaviour across websites. No third-party tracking cookies are used. The session cookie is set with Secure, HttpOnly, and SameSite attributes for maximum security.

9. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — obtain information about your stored data
• Right to rectification (Art. 16 GDPR) — correct inaccurate data
• Right to erasure (Art. 17 GDPR) — request deletion of your data
• Right to restriction (Art. 18 GDPR) — restrict processing of your data
• Right to data portability (Art. 20 GDPR) — receive your data in a structured format
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interests
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please contact us at the email address listed above.

10. Account Deletion

You may delete your account at any time through the Settings page. This will permanently and irrevocably remove all your personal data, match history, settings, and stored credentials from our systems.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

Last updated: April 2026