Privacy Policy

HitLogic is a web application for designing shooting targets and exporting them for print. This policy explains what personal data we process, why and on what legal basis, and what rights you have. We only collect what the service needs to work.

Data controller

The controller of your personal data is UX Studio Piotr Rafiński, ul. Sanatoryjna 81, 85-474 Bydgoszcz, Poland, tax ID (NIP) 967-120-82-64, REGON 341017686.

For any matter concerning your personal data, write to: kontakt@uxstudio.pl

What data we process

• Email address — identifies your account; we send one-time sign-in codes to it.
• Account data — when your account was created and last signed in, plus the current sign-in code and its expiry time.
• Your designs — targets, their version history and the images you upload to use in them.
• Technical data — IP address and basic request information (such as browser type), recorded in server logs and used to protect the service from abuse, for example to limit how many sign-in codes can be requested. Actions taken by the service's administrators on accounts (such as blocking an account) are recorded in an administrative action log.

We don't use passwords and don't ask for your name, phone number or payment details. We don't sell data and don't show ads.

Purposes and legal bases

• Providing the service — creating and running your account, sign-in with a code, storing and syncing your targets, exports (Art. 6(1)(b) GDPR — performance of a contract).
• Security and reliability — protecting against abuse, diagnosing and fixing problems (Art. 6(1)(f) GDPR — the controller's legitimate interest).
• Establishing, pursuing or defending legal claims, if needed (Art. 6(1)(f) GDPR).

We only send messages the service needs (sign-in codes). We don't send marketing and don't profile users.

Who processes data on our behalf

To run HitLogic we use trusted providers that process data on our behalf and on our instructions:

• Railway — application hosting and the database (PostgreSQL); servers in the European Union (Amsterdam).
• Railway (Storage Buckets) — storage of images uploaded to your designs; servers in the European Union (Amsterdam).
• Resend — delivery of sign-in code emails.

These providers are based in the United States, so data may be processed outside the European Economic Area. Such transfers rely on the mechanisms provided for in the GDPR: the European Commission's adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.

Cookies

We only use cookies that are necessary for the site to work or that remember your choice:

• HitLogic.Auth — keeps you signed in; valid for up to 7 days since your last activity, removed when you sign out.
• .AspNetCore.Antiforgery.* — protects forms (such as sign-in) against CSRF attacks; removed when you close the browser.
• hl.lang — remembers the interface language you chose for the Studio; kept for up to 12 months.

We don't use analytics or advertising cookies, tracking tools or third-party scripts, which is why we don't ask for cookie consent.

Data stored in your browser

The editor also works offline, so it keeps some data directly in your browser, on your device:

• HitLogicDB (IndexedDB) — working copies of your targets and the list of changes waiting to be uploaded to your account.
• hl_editor_*, hl.lang (localStorage) — editor settings and a copy of your interface language choice.

This data reaches us only when you upload your changes to your account. You can delete it at any time by clearing the site data in your browser settings — any changes that were not uploaded will then be lost.

How long we keep data

• Account data and designs — until your account is deleted. You can delete your account yourself in the Studio (Account → Delete account) or by writing to kontakt@uxstudio.pl. When you delete it in the Studio, the account and designs are removed from the server immediately; requests by e-mail are handled without undue delay, within one month at the latest. Daily database backups are kept for 7 days, so the data disappears from backups within 7 days at the latest.
• Sign-in code — valid for 5 minutes and deleted once used.
• Server logs — no longer than 30 days. The administrative action log for accounts — up to 3 years, for security and to defend against legal claims.

Your rights

You have the right to access, rectify, erase and port your data and to restrict its processing, as well as the right to object to processing based on legitimate interest.

To exercise these rights, write to: kontakt@uxstudio.pl

If you believe we process your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland): uodo.gov.pl

Is providing data required?

Providing your email address is voluntary, but without it you can't create an account or save designs on the server. We don't make decisions about you based solely on automated processing.

Children

HitLogic is not directed at anyone under 16.

Changes to this policy

We may update this policy as the service evolves. Every change is marked with a new date at the top of this page.