Coastory Privacy Policy

Last updated: 2026-08-22

Coastory is made by Lauren Leppert, doing business as Velocicoder ("Velocicoder", "we"). Questions about this policy or your data: support@coastory.app.

The short version

Coastory is a roller coaster tracking app. Your ride history, ratings, notes, and photos live on your phone. Your photos never leave your phone through Coastory — the app has no way to upload them. If you create a Coastory Account, your email address and a text-only copy of your ride history (never photos) are stored on our servers so you can get your history back on a new phone. If the app crashes, a crash report goes to our error-reporting service so we can fix it; that report never contains your photos, notes, or ride history. No ads, no analytics watching what you do in the app, and we don't sell your data.

What we collect and why

Things you enter. Your display name, ride history, ratings, tags, notes, park visits, and any parks or coasters you add yourself. These stay on your phone. If you create an Account, a text-only copy of these records is stored on our servers so you can restore them on another phone.

Your photos. Stored only on your phone, in the app's private storage. Coastory never uploads, transmits, or has access to them, with or without an Account. There is no photo upload in the app; if you lose your phone without a backup, we can't get your photos back. The in-app Backup feature gives you a copy of your history and photos in a file you control.

Your email address, if you create an Account. Sign-in is passwordless: we email you a one-time code, so we never see or store a password. When you sign in, our sign-in service records the IP address and the phone/app identifier of that session, as sign-in systems normally do.

Reports you choose to send. Coastory has two report forms — Report an Issue, and the catalog reports — and what travels with a report depends on which form you used and on what you're reporting. Nothing from your ride history or photos is included in any of them unless you type it in.

• "Report an Issue" → something is broken. What you wrote, how bad you said it is, the screen you were on and the few before it, and technical context: app and catalog version, device model, whether you're on Android or an iPhone, OS version, screen size and whether that counts as a phone or a tablet, language, light/dark theme, and network state. The app shows you that technical context before you send.
• "Report an Issue" → suggest an improvement. What you wrote, which area you filed it under, the screen you were on and the few before it, and the app and catalog version. Nothing about your device — an idea isn't a diagnosis, so there's nothing to diagnose it with.
• "Suggest a correction" and "Report something missing" — the catalog reports. A correction is sent from a park or coaster page, and always names the park or coaster it's about. "Report something missing" is sent from a park page — where it names that park — or from a search that came up empty, where there's nothing to name. What travels: what you wrote, any link you added, and — when you're correcting a specific fact — which fact, and the value the catalog holds for it today. Plus app and catalog version, and the same technical context as a broken-app report: device model, whether you're on Android or an iPhone, OS version, screen size and whether that counts as a phone or a tablet, language, light/dark theme, and network state. That last part is so we can tell one rider's report from another's while we work through them. The app shows you that technical context before you send. These reports carry no screen trail at all — so when you report something missing from a search, nothing on the report records where in the app you were.

Every report also carries the date and time you sent it, a random identifier for that one report, and, if you're signed in when you send it, your Account id.

Crash reports. If Coastory crashes or hits an unexpected error, a report goes to our error-reporting service, Sentry: the technical details of the error (stack trace), device model, OS version, app version, a short trail of app-level events just before the error (for example, the app going to the background), and whether a session ended in a crash. Reports carry a random per-installation identifier created by the reporting library — not your email, your Account, or any advertising or hardware ID — and we don't connect them to your Account. They never include your photos, notes, ride history, or a screenshot. Sentry is configured not to store your IP address. It does still record roughly where the report came from — country, region and city — which it works out from the internet connection the report arrives on. That is not your phone's location: Coastory never asks your phone where it is, and turning the IP off does not turn this off, because they are separate settings at Sentry's end. We would rather say so than let "we don't store your IP address" imply more than it does. There is no in-app switch for crash reporting; it is on in every store build.

Nothing else. Coastory has no analytics or advertising code, and never asks your phone for your location, your contacts, or anything from other apps. There is no location feature in the app at all. The one thing that comes close is the approximate area described above, which our crash reporter derives from the connection rather than from your device — we count that as collecting your rough location, and we declare it as such on the app stores. If anything else ever changes, this policy will change first.

Permissions. Camera and photo library are requested only when you choose to take or pick a photo, and the image stays on your phone. If you turn on "Also save to my Photos" in Settings, the app also writes copies to your own photo library; that's off unless you choose it. Internet is used for Account sign-in, the optional cloud copy, the reports you send, and crash reports.

Your phone's own backup

Separately from Coastory, your phone may back up app data to your Google or Apple account, or move it to a new phone. On Android, Coastory allows its database into that backup and keeps photos out so the backup stays small enough to succeed; a direct phone-to-phone transfer carries everything. That data goes to your own Google or Apple account under their terms — we never see it. The in-app Backup feature is the copy you control.

Who handles your data

• Nobody, by default. Coastory has no public profiles, feeds, or leaderboards. Another rider can see your history only if you share it yourself.
• Our service providers, who process data only to run the app for us: Supabase (Account sign-in and the cloud copy of your history, hosted in the United States), Sentry (crash reports, hosted in the United States), and the email service that delivers your sign-in codes. We don't share your data with anyone else, and we don't sell it.
• Us, when we read the reports you send to fix the app and the catalog, and crash reports to fix crashes.
• If the law requires it — for example, a valid subpoena. We expect that to be rare.

How long we keep it

• Account data (email, cloud copy, sign-in records): while your Account exists. Deleting your Account removes it (below).
• Reports you send us: until we've acted on them; we may keep a summary of what was wrong and what we changed.
• Crash reports: Sentry keeps them for up to 90 days, then deletes them.
• On your phone: until you delete it in the app or uninstall.

Your choices

• No Account needed. Everything in the core app — logging rides, rating, tagging, photos, your history — works without an Account, and the app won't nag you to create one.
• Erase your phone's data. Settings → Erase everything removes every record and photo Coastory has on the phone. If your Account is linked, you choose in the same place whether to empty the cloud copy too. Uninstalling also removes everything Coastory stored on the phone.
• Delete your Account. Settings → Backup & restore → Delete Account deletes your Account, your email address, your sign-in records, and every record stored on our servers. It doesn't touch what's on your phone unless you ask it to: that screen asks what should happen to the history on the device, and keeping it is the default — leaving an Account says nothing about the record of what you rode. You can also request deletion by emailing support@coastory.app from the Account's address, or via https://coastory.app/delete-account/. Deletion is immediate on our side; copies can remain in our provider's routine database backups for up to 30 days before those roll off. The reports you send us aren't part of your Account and aren't deleted with it — email us if you'd like them removed. Crash reports were never linked to your Account and expire on their own. We don't keep anything for legal reasons today; if that changes, we'll say so here.
• Get a copy or fix something. Settings → Backup & restore → Back up now gives you your complete history including photos, any time. Everything you've recorded is yours to edit or delete in the app. For anything else about your data — access, correction, a copy, deletion — email support@coastory.app and we'll do it.

Children

Coastory isn't directed at children under 13, and we don't knowingly collect personal information from anyone under 13. We don't ask for your age. If we learn that a child under 13 has created an Account, we'll delete it and its data — tell us at support@coastory.app.

Security

Everything between the app and our servers is encrypted in transit, and each rider's cloud data is readable only by the signed-in Account that wrote it. Keeping so little is part of how we keep it safe.

Changes

If we materially change what we collect or how we use it, we'll update this page and the date above, and tell you in the app where practical.

Contact: support@coastory.app