Privacy Policy

Last updated: 2026-07-02

1. Who controls your data

Pewzero AB, a Swedish limited company (org. no. to be added upon registration; registered address to be added), is the data controller for pewzero.com. Contact: [email protected].

2. What we collect

Account: username, email address, display name. Sign-in uses recovery codes and API tokens — we don’t store a separate password. We send no automated e-mail; if you contact [email protected], a human can hand you a one-time sign-in link as a manual fallback.
Match & shot data: the matches, stage runs, and shot timing events you or your registered devices create — this is the core of the service.
Freeze-frames (opt-in, off by default): if you turn on “media-enhanced sessions,” hit freeze-frames from your Eyes and Spotters are stored so they show up on your run pages. Off by default; you can turn it off again at any time.
Detection features (opt-in, off by default): if you turn on “Contribute data” in an app, numeric features about each shot — plus time-of-flight truing samples if you use auto-dope — are sent to help improve detection and ballistics for everyone. This is never audio, never video, and never your location — see §3. One toggle covers all of it; we don’t ask you to consent to each feature stream separately, and if what it collects changes in a way that matters, we’ll tell you what’s new before it starts rather than update this page quietly.
Payment: handled entirely by Stripe. We receive your subscription status and billing dates, never your card number.
API tokens: used by the apps to sign in on your behalf. You can revoke any token from your account page.

3. What we don’t collect

Shot detection runs entirely on your device’s microphone — no audio is uploaded, by default or otherwise. Hit detection on Spotter works the same way with the camera: what leaves the device is a freeze-frame JPEG (only if you’ve turned on media-enhanced sessions), never a video stream. We use no third-party analytics, advertising, or tracking scripts anywhere on pewzero.com.

4. How we use it

To run the service: host your matches, publish results, keep your run history, and authenticate your apps. To process payment, via Stripe. We send no automated account e-mail — sign-in and deletion are both self-service, with no e-mail round-trip. We don’t use your data for advertising, and we don’t sell it.

5. Who we share it with

Stripe — payment processing.
Our hosting provider — the service runs on servers in Finland (EU).
Cloudflare — sits in front of pewzero.com for TLS and network protection; sees connection metadata for traffic routed through it.

We don’t share your data with data brokers or advertisers, and we don’t sell it to anyone.

6. Data retention

Temporary content (calibration frames, media past its retention window) is deleted automatically by a nightly sweep. Deleting your account (from your account page; you type your username to confirm — no e-mail involved) permanently removes everything tied to it immediately — events, calibrations, match runs, private match definitions, tokens. A match definition you made public stays up, credited to “(former user),” since other people may already be relying on it.

7. Your rights

Under GDPR, you can access, correct, export, or delete your data, and object to or restrict certain processing. Account deletion (§6) is self-service; for anything else, contact [email protected]. You can also lodge a complaint with Sweden’s data protection authority, the Integritetsskyddsmyndigheten (IMY).

8. Cookies

We set one cookie: a signed session cookie that keeps you signed in. It’s strictly necessary for the service to work and isn’t used for tracking. We set no analytics or advertising cookies.

9. Children

pewzero.com is not directed at children. If you believe a child has given us personal data, contact us and we’ll remove it.

10. International transfers

Match and account data stay on servers in the EU (Finland). Stripe may process payment data outside the EU under its own standard safeguards.

11. Changes to this policy

We may update this policy as the service changes. We’ll post the updated date at the top of this page.

12. Contact

Questions about this policy or your data: [email protected].