Privacy
Cazzo di pale is a free project with no ads. It keeps only what it needs to build your plans and track your progress, and never sells or shares it.
Last updated: 9 November 2026
What we keep
- The athlete's profile: name, sex, year of birth, height, bodyweight, level, goal, equipment, maxes, 5 km time, race date, training days and places, notes.
- Plans and training: the plans generated, the sessions marked done with perceived effort and notes, and the results logged from the timer (loads, reps, times, rounds).
- The PIN of older athletes: only as a hash, never in plain text. It's removed when you link the athlete to Google.
- Your Google account, if you sign in: email, Google ID, name and the address of your profile picture. That's all we ask Google for: no contacts, files or anything else.
- Signed-in devices: for each sign-in we keep only a hash of the session code and when it expires, so a copy of the database can't be used to sign in.
Bodyweight, height and training data can say something about your health. We use them only to build your plans and show your progress.
What we don't do
- No ads, no visitor analytics, no tracking.
- We don't sell, rent or hand over data to anyone.
- No marketing email.
Who can see your data
An athlete opens only for the Google account it's linked to. Nobody sees a list of the other athletes.
Athletes created before accounts still open with name and PIN until 9 December 2026. On that day, those not linked to a Google account are deleted, with their plans and results.
Where the data lives
- Vercel: hosts and serves the site.
- Cloudflare D1: the database with profiles, plans and results.
- Google: only for sign-in, if you use it. Your profile picture loads from Google's servers.
- YouTube: some mobility drills show a video from youtube-nocookie.com, loaded only when you open that drill.
These services may process data outside the European Union, under the safeguards the GDPR provides (standard contractual clauses).
Cookies and storage on your device
We use only technical cookies the app needs to work, which is why there's no cookie banner:
cdp_account: keeps you signed in with Google (1 year).cdp_unlock: remembers the athletes opened with name and PIN in this browser (until 9 December 2026).cdp_lang: the language you picked (1 year).cdp_g_*: protect the trip to Google and back (10 minutes).
Your phone also keeps, for itself only: timer settings, the running timer, results waiting for a connection and the open mobility session. None of it is sent, except the results you choose to save.
Deleting your data
- From the athlete's edit page you can delete it: the profile, plans, completed sessions and every result go with it.
- From "Account" you can sign out of every device.
- To delete the linked Google account, write to andrei.sarioglu@gmail.com: we delete it within 30 days.
Data stays while the athlete or account exists. We keep no copies after deletion, except the database's automatic backups, which expire on their own.
Your rights
Under the GDPR you can ask to see, correct, export or delete your data, and object to its use. Write to andrei.sarioglu@gmail.com. If you think your data is mishandled, you can complain to the Italian data protection authority (garanteprivacy.it) or the one in your country.
Who's responsible
Cazzo di pale is maintained by Andrei Sarioglu, Italy. Contact: andrei.sarioglu@gmail.com.
If this page changes in a meaningful way, we'll say so here with the new date.