Privacy notice.

1. Controller and contact details

The data controller is DcSystems di Carelli Daniele, the developer of MunitionLab. For privacy questions and to exercise your rights: info@munitionlab.it.

2. Data processed

• Account: email address, verification data and protected credentials. If you choose Google sign-in in the app, we receive the identifiers and information needed to recognize your account, not your Google password.
• Local archive: firearm, ammunition and lot catalogs; sessions, target sheets, taps, results, notes, chronograph measurements and photographs you capture or import. They remain on the device until you choose to export them or use a cloud feature.
• Optional cloud copies: we receive selected content when you initiate an upload, according to the preview and options in the app. It may include session data, photographs, names and notes. The portal reads copies already uploaded and does not automatically upload your archive.
• Pro access and Google Play: to verify and maintain access, we process the account association, purchase identifiers and tokens, product/plan, subscription status and expiry. The server stores an encrypted purchase token and its hash. Payment is handled by Google Play; MunitionLab does not collect your card number. Pro access granted by administration has a recorded source and duration.
• Technical data: IP address, date and time, requests, outcomes and errors needed for operation, security and diagnostics. Camera and files are used when you choose the corresponding features.

Communication with Garmin Xero and analysis take place in the app; MunitionLab does not send chronograph data to Garmin to produce analysis. When you export or share through other apps, files leave MunitionLab’s control for the recipient you select.

3. Purposes and legal bases

• Account, sign-in, credential recovery, Pro verification and requested features: performance of the requested service (Article 6(1)(b) GDPR).
• Storage, consultation and removal of cloud copies chosen by the user: performance of the requested optional service (Article 6(1)(b) GDPR).
• Protection against misuse and failures, continuity and support: legitimate interest in service security and operation (Article 6(1)(f) GDPR).
• Applicable legal obligations: compliance with a legal obligation (Article 6(1)(c) GDPR).

We do not use sessions for advertising profiling. The app does not integrate AdMob or RevenueCat.

4. Recipients and external services

Technical hosting, infrastructure and email providers process data needed to deliver account and cloud services. If you choose Google services, Google handles authentication and purchases under its own terms and provides information needed for sign-in or subscription verification. We do not sell session data or provide it for advertising.

Information may be disclosed to authorities when required by law. External providers and Google services may involve processing outside the European Economic Area under their terms and applicable safeguards; you can request further information using the contact above.

5. Retention and deletion

The local archive remains on your device until you delete it. Accounts and cloud content remain while the service is active or until you request deletion, except for data needed for legal obligations, requests and security. Subscription and access data are retained to manage and verify the service. Technical logs are kept for the time needed for those purposes; backups may retain temporary copies until their replacement cycle.

You can remove cloud copies in the app. To request deletion of your account and associated server data, write from your account email address to info@munitionlab.it. Deleting your account does not delete archives stored only on your phone or files already exported and shared.

6. Your rights

You may request access, rectification, erasure, restriction and portability where applicable, and object to processing based on legitimate interest, by writing to info@munitionlab.it. You may lodge a complaint with the Italian Data Protection Authority.

7. Website, security and changes

The website uses technical session cookies and stores your light/dark/system appearance preference in your browser. The portal holds its access token only in memory for up to 15 minutes: reloading the page requires signing in again. These tools support operation and are not used for advertising tracking.

Remote services use HTTPS and access controls; no system guarantees zero risk. MunitionLab is intended for adults. Material changes are published on this page with an updated date.

Optional session weather

The weather button requests location only when you choose to use it. You can deny permission and enter values manually. The app rounds coordinates to two decimal places before sending them to MunitionLab, which requests MET Norway forecasts and temporarily caches them. MET Norway receives approximate location and the MunitionLab server IP address. Background tracking is not enabled and coordinates are not saved in the session.

Weather values, source and time are stored with the session when you start it and included in copies or exports you choose to create. These are hourly estimates that may be edited manually, not on-site instrument readings. For provider processing details, see the MET Norway terms.