SURVIVE THE LOOP Back to home
DEEN
Legal

Privacy

This English version is a courtesy translation. Only the German version is legally binding: Datenschutzerklärung.
As of November 14, 2026. Applies to the website stundenschlag.com, the reminder list and the app “Survive the Loop” (German name: “Stundenschlag”) for iPhone.

In short

Controller

Marcel Baade, c/o GL BestattungsExperten GmbH, Ahornallee 3, 22529 Hamburg, Germany
Email: mbaade@bspconsulting.de

Visiting the website

When you open the site, our hosting provider processes technically necessary data (IP address, time, page requested, browser) in server logs to deliver the site and protect it against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Hosting: Netlify, Inc., San Francisco, USA. Transfers to the USA are based on the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

Audience measurement

To see whether our posts reach people, we count visits to this website – without cookies, without storing your IP address and without recognizing you across several page views or websites. For this, your browser creates a random ID for each page view; it is not stored on your device and expires when you close the page.

We store: the page visited, the name of the website you came from (for example “instagram.com,” never the full address), a campaign tag from the link (utm_source), the device type (iPhone, Android, tablet or computer – derived from the browser’s user agent, which we don’t store ourselves), the country (roughly determined from the connection; we don’t store the IP address), the time and whether you tap an App Store link. While the page is open and visible, it sends a short sign of life every 45 seconds – that’s how we see how many people are here right now. This information doesn’t allow any conclusions about who you are.

The data is stored with our service provider Supabase (London) and deleted after 120 days. Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in measuring the website’s reach. You can object at any time, for example by turning off JavaScript for this website or using a content blocker.

Reminder list

When you sign up, we store your email address, optionally your first name and country, the wording of your consent and the time. We use this to send you a confirmation email (double opt-in) and then news about the app launch and Race 001. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time – via the link in every email or by emailing us.

We delete unconfirmed entries after 30 days. We delete confirmed entries as soon as you unsubscribe, or at the latest when Survive the Loop is discontinued.

Service providers

Data processing agreements are in place or being concluded with all service providers.

The app

Account. You sign in with a code sent by email or with “Sign in with Apple.” We store your email address (with Apple, possibly an anonymous relay address), your display name, your country, your year of birth (participation from age 18) and optionally your club. Legal basis: contract for participation (Art. 6(1)(b) GDPR).

Location. The app uses your precise location to measure your base, plan your loop and check every yard – even with your phone locked, as long as a test yard or the race is running (blue location indicator in the status bar). We store: your base (coordinates and accuracy), your planned loops (path) and, for each yard, only the result (valid/invalid, meters measured, number of checkpoints). The GPS track itself is only transmitted for the check and is not stored. During the race, your current position is transmitted about every 30 seconds and overwritten; only people you have confirmed as your crew can see it.

Motion & Fitness. The app detects whether you’re walking, running, cycling or driving, and reads your iPhone’s step counter during a yard – to detect vehicles (“wheels don’t take steps”) and keep the results fair. With every GPS point, the category (e.g., “on foot”) is transmitted, and your number of steps for every minute. For each yard we store the step count, the average stride length and cadence, as well as a stride profile (which stride length matches which pace for you, only as aggregate values). This is used to flag yards where someone else apparently ran with your phone. Only you and your confirmed crew see the yard values, and only you see the stride profile; everything is deleted with your account. Legal basis: contract for participation (Art. 6(1)(b) GDPR).

Publicly visible (live field in the app and on the website): display name, country, bib number, number of yards and status (running, out, win). On the world map, your base only appears heavily rounded (about 20 km), and only if you leave this switched on in your profile.

Username and friends. If you choose a username in the app, other signed-in users can find you by that name or by your display name; they then see your username, display name and country. Without a username, nobody can find you. Only you see friend requests, your friends list and whom you have blocked – a friendship is visible to both people involved. Blocked people can no longer find you and can neither send you requests nor invite you to races. Legal basis: contract for participation (Art. 6(1)(b) GDPR).

Your own races and invites. If you plan a race, we store its name, time, whether it’s public or private, and that you planned it. Public races are visible to everyone: in the app with your display name and username, on the website’s live page with name and live field. Private races are visible only to you, the people you invited, the participants and their confirmed crews. Anyone who can see a race can also see who is running (display name, username, country, bib number, status). An invite (who invited whom, and the answer) is visible to the person who sent it and the person invited; whoever planned the race sees all of its invites. Legal basis: contract for participation (Art. 6(1)(b) GDPR).

Reporting. If you report a person or a race, we store who reported what, when and for what reason, so we can check for abuse. After reports from three different people within 30 days, a username is automatically reset or a race is removed from the public list. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a safe, respectful service).

Notifications and Live Activity (bell, whistles, time left on the Lock Screen) are scheduled and shown on your iPhone.

Crew. Anyone who enters your crew code sends you a request; only once you confirm can that person see your position, your battery level and your requests during the race. In an emergency (SOS button), your position is also reported to your crew.

Deletion. Under Profile → “Delete account,” you delete your account with all data (profile, username, registrations, base, loops, results, crew connections, friendships, invites and blocks) immediately and permanently. Races you planned remain for the other registered runners, but without your name. Results of past races in the Hall of Fame remain only as long as your account exists.

No tracking, no ads, no analytics tools in the app.

Live page

During a race, the live page shows the participants’ display names, bib numbers, countries and race status – for Race 001 and for public races created by users whose link has been shared. It doesn’t show private races. Exact locations are never shown publicly.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Just write to us. You can also lodge a complaint with a data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.

Cookies

This website doesn’t set cookies and doesn’t store anything on your device for audience measurement.