Privacy policy

Oplo processes personal data, some of which is sensitive under firearms regulation. This page sets out what we hold, why, and what you can demand at any time.

The app is currently distributed as a private test, to invited people only. The processing described below applies as soon as a tester creates an account or uses the app. Oplo is not yet publicly available and no paid subscription is offered during this phase.

1. Data controller

Anthony Baillon (Individual — non-professional publisher), publisher of oploguns.com, hereafter "we".

Contact for any question about personal data: hello@oploguns.com.

The data controller is currently an individual: there is no company and no data protection officer, the appointment of a DPO not being required for processing of this nature and scale.

2. Guiding principle

We do not sell any data and earn no advertising revenue from it. Our business model rests solely on subscriptions and on partnerships with clubs. No advertising tracker is embedded in the app or on the site. The site uses audience measurement (Google Analytics 4) with no advertising features; how it works, the cookies it sets and how to opt out are detailed in the cookie settings.

3. Data processed

3.1 Account

Email address or phone number, technical identifier, creation date and language. If you use Google Sign-In, Google sends us the identifier and profile information required for authentication. A first name, last name and profile picture are also processed if you provide them.

3.2 Shooting activity

Sessions (date, place, discipline, duration), scores and hits, declared firearms (model, calibre, serial number, photograph), ammunition stock and consumption, equipment maintenance.

3.3 Regulatory data

Licence number and federation, validity dates, medical certificate and its expiry, items relating to firearms registry filings and holding authorisations, and documents you choose to upload.

This data falls under specific regulation. It is stored encrypted and is shared with your club only to the extent strictly necessary to manage your membership.

3.4 Club data

If you are a member of a club using Oplo, your membership, membership status, recorded attendance and assigned roles are visible to that club's authorised officers.

3.5 Technical data

Connection logs, technical app or installation identifiers, notification token, crash reports and diagnostics. They are necessary for authentication, security, requested notifications and fault diagnosis.

3.6 Contact form and waiting list

When you write to us from the Contact page, or ask to be notified when the app is released, we receive: your email address, the name you give, the subject of your request, where applicable your club's name and its number of members, the page the request came from, and the message you write.

This information is sent by email to hello@oploguns.com. A timestamped record — without the body of the message — is also written to a file on the server, placed outside the web root and therefore not downloadable: without it, a lost email delivery would make a sign-up disappear with nobody knowing.

• Legal basis: your consent, given by submitting the form.
• Purpose: replying to you, and letting you know when the app is released.
• Recipient: the publisher alone. These addresses are never sold, rented or used for anything else.
• Retention: until the release announcement, then twelve months at most. Erased at any time on request to hello@oploguns.com.

4. Purposes and legal bases

Purpose	Legal basis
Providing the test service (account, local log and enabled online features)	Performance of the contract
Managing subscription and billing, once enabled	Performance of the contract
Managing club membership and attendance register	Performance of the contract / club's legitimate interest
Alerting you to deadlines (licence, medical certificate)	Performance of the contract
Securing the service and preventing fraud	Legitimate interest
Answering your support requests	Legitimate interest
Meeting our accounting and legal obligations	Legal obligation

5. Recipients

Your data is accessible only to:

• yourself;
• your club's authorised officers, for membership and attendance data only;
• our technical processors, listed below, acting on our instructions.

Processors:

• Google Cloud EMEA Limited — database and API hosting, europe-west9 region (Paris, France).
• Google Firebase / Google LLC — account authentication, Google Sign-In, notifications, crash reports and technical diagnostics.
• Google LLC — distribution of the Android version through Google Play. No paid subscription is active during the private test.

6. Transfers outside the European Union

Application data hosting is located in France. Some processors may carry out transfers outside the European Union, governed by the European Commission's standard contractual clauses.

7. Retention periods

• Active account: for as long as you use the service.
• After account deletion: erased within 30 days, apart from items subject to a legal obligation.
• Accounting records: 10 years, under the French commercial code.
• Technical logs: 12 months.

8. Security

Data stored on your device is held in an encrypted database (SQLCipher). Exchanges with our servers are encrypted in transit (TLS). Access to production databases is restricted and logged, and isolation between clubs is enforced at database level.

9. Your rights

You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to give instructions on what happens to your data after your death.

To exercise them: hello@oploguns.com. We reply within one month.

Account deletion can also be requested directly from the app — see the Account deletion page.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL: www.cnil.fr.

10. Minors

The service is not intended for people under 15 without the consent of a parent or guardian. A club may record a legal guardian for its underage members.

11. Changes

Any substantial change to this policy will be notified to you in the app before it takes effect.