Privacy policy
Last updated: 4 July 2026
ClimbBench lets you record self-reported physical assessments and compare them against benchmark ranges. This notice explains what personal data we collect, why we collect it, and the rights you have over it under UK and EU data-protection law. See also the terms of service.
Who we are
ClimbBench is the data controller for the personal data described in this notice. If you have any questions about this policy or about your data, contact us at info@climbbench.com.
The data we collect
We only collect data you give us directly. There is no tracking, no advertising and no third-party analytics.
- Account data - your email address and password. Authentication is handled by our provider (Supabase); your password is stored only as a secure hash and we never see it.
- Profile data - captured at onboarding: your first and last name, age, gender, the benchmark cohort you choose to compare against, height, weight, primary discipline, current and target climbing grades, and indoor/outdoor preference.
- Assessment data - the values you enter for each physical test, any notes you add, and when you entered them.
- Technical data - the session cookies needed to keep you signed in (see Cookies below).
How we use it, and our lawful bases
- To provide the service - building your capability profile and comparing it against benchmark ranges for your grade. Your height, weight and chosen comparison cohort are used only to normalise your results and select the right reference ranges. Lawful basis: performance of a contract (Article 6(1)(b) UK GDPR).
- To keep the service secure - authenticating you and preventing abuse. Lawful basis: our legitimate interests (Article 6(1)(f) UK GDPR).
- To respond to you - when you contact us with a question or request. Lawful basis: our legitimate interests (Article 6(1)(f) UK GDPR).
We do not sell your data, use it for advertising, share it for marketing, or make automated decisions about you that have legal or similarly significant effects.
Who can see it, and who we share it with
Your assessments and results are private to your account - there are no public profiles, leaderboards or feeds. We share personal data only with the processors that host the service on our behalf:
- Supabase - database and authentication.
- Vercel - application hosting.
Both act under data-processing agreements. Where they process data outside the UK or EEA, the transfer is protected by appropriate safeguards such as standard contractual clauses. We may also disclose data where the law requires it.
Cookies
ClimbBench sets only strictly necessary cookies: first-party session cookies (named with an sb- prefix) that our authentication provider, Supabase, uses to keep you signed in. They are not shared with any third party and they expire when your session ends or you sign out.
We set no analytics, advertising or other tracking cookies, and there are no third-party cookies - which is why you don't see a cookie banner: cookies that are strictly necessary to provide a service you asked for don't require consent. If we ever introduce non-essential cookies, we will ask for your consent first.
How long we keep it
We keep your personal data only for as long as your account exists - there is no soft-delete and we keep no copies to win you back. You can delete individual assessment results in the app at any time, and you can delete your whole account yourself from your account page - this permanently erases your sign-in, profile and results. You can also email us at info@climbbench.com and we will erase your data without undue delay. The only exception is data we are legally required to keep, which we retain only for as long as the law requires.
Your rights
Under UK and EU data-protection law, you have the right to:
- access a copy of the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to how we process it;
- receive your data in a portable format.
You can exercise the access, portability and erasure rights yourself, at any time, from your account page: "Download my data" gives you a machine-readable copy of everything we hold about you, and "Delete account" erases it. For anything else, email info@climbbench.com. You also have the right to complain to a supervisory authority - in the UK, the Information Commissioner's Office (ICO).
Children
ClimbBench is not directed at children. You must be at least 18 years old to create an account.
Changes to this policy
We may update this policy as the service evolves. We will post the new version here and update the date at the top; if a change is significant, we will let you know in the app or by email.
Contact
Questions, requests or concerns: info@climbbench.com.