Privacy

Who is responsible

Within Range is an independent New Zealand project operated by Tim Phillips. For privacy questions, requests or complaints, contact Tim at privacy@withinrange.nz.

Records on your device

This version has no account, login or cloud sync. Saved setups, custom loads, drills and practice sessions are held in this browser’s local storage. The site also remembers whether you completed or skipped onboarding, with a timestamp. These records are not automatically uploaded to Within Range.

The practice backup reminder also stays in this browser. It remembers a reminder snooze date, when you last requested an export or imported a backup, and the session identifiers included at that time. This information is not sent to analytics and does not confirm that an exported file was saved. Delete local data in My Practice also clears this reminder history.

If you measure a group from a photo in My Practice, the photo is opened only inside this browser. It is not uploaded, sent to analytics or saved, and it is discarded when the measuring window closes. Only the shot positions and group measurements you choose to use are kept, with that practice record.

You can use the calculator without creating a saved setup. Browser-local storage is not an encrypted account or a private vault: someone with access to your device and browser profile may be able to read your records.

If you tap “Use my location for conditions” in the calculator, your browser asks for location permission. The site rounds your coordinates to two decimal places (roughly kilometre scale) before sending them to Within Range on Cloudflare. Our weather endpoint sends that approximate location, and a rounded device altitude if available and accurate enough, to MET Norway for a forecast. MET Norway provides the weather data under a Creative Commons attribution licence. Forecast results may be cached briefly to limit repeat requests. The app does not save your coordinates in local storage or send them to product analytics. You can decline permission and enter conditions manually.

• In My Practice, use Export JSON to download a backup and Delete local data to remove saved custom loads, setups, drills and sessions from that browser.
• Deleting practice records leaves display and onboarding preferences in place. To remove those too, clear this website’s site data in your browser settings.
• Local records have no automatic expiry in the app. Your browser may remove them, and clearing site data can permanently erase them. We cannot recover a copy that was never sent to us.
• Downloaded backups remain wherever you save them, including any device backup or cloud folder you choose. Deleting site data does not delete exported files or information you have emailed to us.

Website visits, analytics and security

Cloudflare hosts and protects this website. We also use Cloudflare’s reporting to understand website traffic and maintain the service. Reports include browser and operating-system information, country-level location and website requests. Request and security information available to us can include IP addresses, requested URLs and request times.

Social links may carry a short campaign code. We record only a known channel and an editorial campaign slug, keep it with this browser’s anonymous session, and remove the tracking parameters from the address bar. We also count when optional Ballistics 101 information is seen or clicked and when checkout is requested. These are engagement and checkout-intent counts, not confirmed purchases; purchase identifiers and calculator values are not included.

We use this information to understand how the site is used, identify compatibility or performance issues and investigate unwanted traffic. Cloudflare processes it to deliver its hosting, analytics and security services. These records are separate from the practice records saved in your browser; the app does not automatically upload your saved setups, custom loads, drills or practice sessions to these reports.

Visitor analytics and request/security logs are different types of reporting. We do not describe all Cloudflare reporting as anonymous: IP addresses and request details can be personal information. Cloudflare’s retention and access limits depend on the service, plan and settings in use.

The app uses local storage for its saved records, onboarding preference and display preferences, including Outdoor contrast. Your Outdoor contrast choice is stored only in this browser and is not sent to our analytics. It does not require an advertising cookie to use those features. Cloudflare security features may use cookies where needed to protect the service. Read Cloudflare’s privacy policy for its processing practices.

Separately from Cloudflare’s reporting above, Within Range also runs its own small first-party product-analytics system, so we can understand broad usage of the calculator and Practice features and roughly how many visits are from new versus returning browsers. It stores a random browser identifier and a session identifier locally and sends those identifiers with analytics events. Sessions expire after 30 minutes without a tracked event. The session keeps the entry traffic source through navigation. This identifier is not linked to your name, email address or any account, and it does not encode or derive from your IP address, a device fingerprint or Cloudflare’s own reporting. It never records your rifle setup, cartridge, species, calculated range or other calculator result values. Offline events are not queued or uploaded later. If browser storage is unavailable, product tracking is skipped. It only records which interaction happened (for example, that a calculation completed, that a calculator step was reached, that an input error stopped a calculation, without the input itself, or that an optional practice detail such as a wind call was recorded, without its values), the page path, a general traffic source and whether the browser is new or returning. The traffic source is the referring website's domain, or a short campaign tag such as src=nz-hunting-fb when you arrive through a link we have shared; the tag is removed from the address bar once read.

Product analytics also records the country code supplied by Cloudflare, such as NZ, with XX when unavailable or T1 for Tor. The product-analytics Worker does not read or store your IP address; Cloudflare request and security logs remain separate. We count when the calculator’s setup section enters a visible foreground viewport and when the readable Ballistics 101 sample is opened. These events do not prove that you read or understood the content, and contain no form values or purchase identifiers.

If you contact us

Email links open your chosen email application. Sending an email shares your email address, name if supplied, message and any attachments with us and the email providers delivering and storing it. We use this information to respond, investigate problems and consider feedback or corrections.

We use Proton Mail for our Within Range mailboxes and do not forward incoming mail to another mailbox provider. Your own email provider also handles messages you send to us. Proton processes email metadata and stores mail on servers in Switzerland, Germany or Norway. See Proton Mail’s privacy policy.

Contacting us is optional. If you leave out details needed to investigate, we may be unable to resolve the issue. Please remove unnecessary personal details from screenshots and avoid sending passwords, full card numbers, firearm serial numbers or precise hunting locations.

Optional support through Stripe

Choosing Support Within Range takes you to Stripe’s hosted checkout. Stripe collects the information requested there and processes your payment. This website does not collect your full card number or card security code.

Our Payment Link does not require address collection and has phone-number collection, business tax-ID collection and saving payment details for future use switched off. These settings do not prevent Stripe or your chosen payment-method provider from processing information needed to complete, authenticate or protect the payment. A payment-method provider may offer its own saved-payment features under its own terms.

Stripe makes transaction information available to us, which may include your name, email address, payment amount and date, transaction reference, payment status and limited payment-method details. We use it to administer support payments, handle enquiries, refunds or disputes, and maintain financial records. Supporting the project does not create a Within Range account.

You do not need to pay to use the free tools. If you choose to pay, Stripe needs the checkout information required to process that payment. Stripe also processes information for its own purposes, including fraud prevention; see Stripe’s privacy policy.

Digital purchases. If you buy Ballistics 101, checkout runs through Stripe as a separate one-off payment. After Stripe confirms the Checkout Session is paid, the browser requests the PDF from a Within Range Worker. Card details stay with Stripe. We do not create a Within Range account or a marketing list for a purchase.

Stripe may make the purchaser’s checkout and receipt information available to us so we can help with delivery problems, refunds, disputes and financial records. A personal purchase identifier is sent to our download endpoint and Stripe to verify payment. It may occur in Cloudflare request logs; we do not send it to product analytics or track visits on the download page. The page moves it into the URL fragment so a bookmark can recover your download without storing a purchase record in browser storage. Keep that link private. Save the PDF locally for offline reading.

Service providers and overseas processing

Hosting, email and payment providers process information to deliver their services. Their infrastructure and support operations may be outside New Zealand. Browser-local practice storage does not mean that hosting logs, emails or payment records stay in New Zealand.

We use information received from you for the purposes described here. We may also disclose information where required or permitted by law. We do not sell your personal information or add you to a marketing mailing list because you contacted us or made a support payment.

Retention and security

We keep correspondence and payment records only for as long as needed for the purposes described above, including resolving enquiries and meeting applicable financial recordkeeping obligations. Provider retention and backup practices also apply to records held in their services.

We take reasonable steps to protect information we hold. No website, email service or device can guarantee complete security. Protect your device and any exported practice backups, particularly on shared devices.

Access, correction and complaints

You can ask whether we hold personal information about you, request access to it and ask for corrections by emailing privacy@withinrange.nz. We may need to verify your identity before releasing information. Please do not send identity documents unless we explain why they are needed.

You can also ask us to delete information we hold. Some records may need to be retained for lawful purposes, such as financial recordkeeping or resolving a dispute; we will explain any limits. For records stored only in your browser, use the controls described above.

If we do not make a correction you request, you can ask us to attach a statement of the correction sought. If you are concerned about our handling of your information, contact us first. You can also contact the Office of the Privacy Commissioner.

Changes to this statement

We will update this page when our data practices change. Any future accounts, cloud sync or additional collection will need a revised explanation before you use those features.