● #HELLSTORM / mIRC 1998 → NOW / 28 YEARS STRONG
/ PRIVACY POLICY / GDPR · PLAY STORE

PRIVACY POLICY

Effective: 11 May 2026 · updated 5 October 2026

1. Who we are

Hellstorm (referred to as "we", "us") is an independent offroad community brand operating the domain hellstorm.bg. Hellstorm Track is a free Android application developed and maintained by Hellstorm for the needs of buggy convoys and the offroad community.

Contact: info@hellstorm.bg

2. Data we collect

2.1. GPS / Location data

When you use Hellstorm Track, the app collects your GPS coordinates for the following purposes:

  • Recording your track (mapping your route)
  • Real-time sharing of your position with members of the group you joined
  • Computing statistics (distance, speed, ride duration)

Location data is stored locally on your device and in Firebase Realtime Database (Google Cloud, EU multi-region), accessible only to members of the specific group you joined. After leaving a group your position is no longer transmitted.

2.2. Photos

When you choose to share a photo with the group, it is uploaded to Firebase Storage (Google Cloud, EU multi-region) and accessible only to group members. Photos taken without explicit sharing remain only on your device — unless you turn on automatic upload to the adventure album (section 2.6).

2.3. Device identifier

An anonymous identifier (random UUID) is generated at first launch to distinguish devices within a group. It is not linked to your email, phone number, or Google account.

2.4. Group name (display name)

When you join a group you set a display name (nickname). The name is visible to other group members. It does not need to match your real name.

2.5. "My tracks in the planner" library (optional)

Only if you turn it on from the app menu: the tracks on your phone (GPX + a simplified line, name, date, length, type) and your group name are uploaded to the hellstorm.bg server. They can be seen only by people with your HS-… code (you and friends you gave it to — view only) and by the Hellstorm administrator. The code and the write key are also kept in Firebase under your anonymous identifier so they come back on a new phone. A track deleted in the app is deleted from the library too; to delete the whole library, write to us (section 10).

2.6. The adventure album (optional)

Only if you turn it on (the app asks once; change it in menu → "📷 Adventure album"): the photos you take with the phone camera during the ride (from 30 minutes before the start to 30 minutes after the end of your recording or the group's recording) are uploaded automatically to the adventure album on hellstorm.bg — the originals, with the time and place from the photo, so they land on the track. Photos from Viber, WhatsApp, Telegram, screenshots and other people's photos received in the group are not uploaded. Wi-Fi only by default. The app reads the gallery only for this and only if you turned the feature on. Uploaded photos and your group name can be seen only by people with the album's 6-character code (the adventure's participants and anyone they share it with) and by the Hellstorm administrator. A photo uploaded by mistake is deleted on request (section 10).

2.7. Joining a group from the browser (hellstorm.bg/go)

If you join a group through the web page (e.g. from an iPhone), your position is sent to the group — just like from the app — only while the page is open and sharing is on; the "Sharing/Hidden" button stops it and "Leave the group" removes you from the map. Photos you upload there go to the adventure album (section 2.6).

3. What we do NOT collect

  • We do not collect your email, phone number, or Google account
  • We do not use analytics services (Google Analytics, Firebase Analytics, Mixpanel, or similar)
  • We do not use advertising trackers
  • We do not sell or share data with third parties
  • We do not record audio, access contacts, or read SMS messages

4. Third parties (Sub-processors)

We use the following infrastructure providers:

  • Google Firebase (Realtime Database, Storage, Auth) — EU multi-region. Data processing agreement: Google Cloud DPA.
  • Google Maps SDK — for rendering maps in the app. Maps load from Google servers; Google may log these requests per the Google Privacy Policy.
  • Cloudflare Pages — for hosting hellstorm.bg. Cloudflare may log anonymous traffic metrics.
  • Cloudflare Email Routing — forwards mail to info@hellstorm.bg to a real mailbox.

5. Data retention

  • GPS tracks in Firebase are retained for active groups. After an adventure ends, data is archived locally on devices.
  • Photos in Firebase Storage are retained until you delete them from the app or from group settings.
  • Adventure album photos (hellstorm.bg) are retained until you ask us to delete them (section 10).
  • Local data (track history, photos) is retained on your device until you uninstall the application.

6. Your rights (GDPR)

As an EU resident you have the following rights:

  • Access to your data — write to info@hellstorm.bg
  • Deletion ("right to be forgotten") — uninstall the app and request deletion from Firebase
  • Correction of inaccurate data
  • Complaint to the Bulgarian Commission for Personal Data Protection (CPDP) — cpdp.bg

7. Security

Hellstorm Track uses Firebase Authentication (anonymous auth) and Firebase Realtime Database Rules for isolation between groups. HTTPS/TLS for all communication. Local data on the device resides in standard Android private storage (sandboxed per-app).

8. Children

Hellstorm Track is not intended for children under 13. We do not knowingly collect data from children. If you are a parent and believe your child has sent us data, contact us at info@hellstorm.bg.

9. Changes to this Privacy Policy

We will update this document on significant changes. The date at the top shows the last update. Continued use of the app after a change implies acceptance of the new version.

10. Contact

Questions about this document: info@hellstorm.bg