DOGCRAFT CLICKER — PRIVACY NOTICE
12 September 2026 · Version 2.0
WHO IS RESPONSIBLE
Ilko Tsanev / Tsanev Dogcraft. Contact: https://tsanevdogcraft.eu. This notice covers the client Android app and my.tsanevdogcraft.eu/click/.
REGISTRATION AND PROFILE
Email verification and a training purpose are required for a client account. Your name and your dog’s name, breed and age are optional. We store your profile, language, consent choices, registration/activity dates and a random installation/account identifier on our server. A sign-in token is encrypted on the phone and stored as a hash on the server. Verification codes expire after 10 minutes. Registration/account management is processed to provide the service you request; your optional profile helps personalise your account. The clicker works offline after registration.
YOUR CLICK HISTORY
Daily click totals and dates stay on your phone. They count triggered clicks, including muted clicks, and use the phone’s local date. With separate optional usage consent, the app sends daily totals and whether clicks happened with the app open, another app open, the phone locked or the screen off. Reports also include phone make/model, Android/app version and the kind of control used. Reports may sync in the background and are linked to your registered account. We do not monitor activity in other apps, collect precise location, upload Bluetooth names, hardware serial numbers, button mappings or raw input signals.
MARKETING AND MESSAGES
Email tips/offers, app marketing notifications and update alerts have separate choices and are off by default. Optional marketing and usage reports rely on your consent. Declining them does not limit clicker controls or local statistics. Withdraw in Profile or on our /click/ account page. Offline withdrawals are queued; app reporting stops locally immediately. Online withdrawal stops the server processing immediately. Stop all marketing disables promotional email and app messages. Stopping usage sharing also deletes uploaded usage and phone-model reports, while keeping your local click history. Announcements are fetched periodically and on app open; Android may delay delivery. Notification delivery and Google Play’s automatic-update setting are separate. No notification read receipts are collected.
OPTIONAL BUTTON ACCESS
With a separate disclosure and Android Accessibility permission, the app receives hardware key events during training to handle your chosen remote key, volume key or media command. It cannot retrieve screen contents or record text. Device identifiers and mappings stay on your phone; the recent-input diagnostic list is temporary and is never uploaded. Appear on top enables the floating click button. A foreground media service and notifications keep user-started training controls available. No microphone, camera, contacts or location permission is requested.
HOSTING AND SECURITY
Account data and optional reports go over HTTPS to our own portal. Hosting/database and SMTP email providers process data to run that service, under our instructions. We do not sell data or include third-party analytics/ad SDKs. Email delivery uses SMTP authentication and TLS. The web account uses session storage for sign-in; the owner reporting page uses an essential session cookie. Short-lived rate limits use keyed hashes of email/IP values for abuse prevention, based on our legitimate interest in securing the service. Hosting providers may keep separate security/access logs under their configured retention. External service and YouTube links open only when tapped, under those sites’ policies, without attached clicker profile or diagnostic data.
RETENTION AND YOUR RIGHTS
Verification challenges expire after 10 minutes; rate-limit records expire within their configured window (up to one hour). Uploaded daily reports are kept for up to 365 days. Accounts and consent records remain while the account is used; inactive accounts are removed after 730 days without authenticated activity. Local history remains until you delete it. Server maintenance removes expired records; protected host backups follow the operator’s backup schedule and must be allowed to expire or have deletions reapplied if restored.
In Profile you can correct optional details, export your data, withdraw optional consent or permanently delete your account and data. The /click/ page offers email sign-in, export and account deletion without the app. Deleting from the app removes the server account and this phone’s local data. Web deletion removes server data; local data on other phones must be cleared separately. Other devices lose server access after deletion. Contact us for access, correction, deletion, portability, restriction, objection or help. You can complain to the Bulgarian Commission for Personal Data Protection or your local supervisory authority. We do not make automated decisions with legal or similarly significant effects. This service is intended for adult dog owners and trainers.
Normal updates preserve local settings; uninstalling or clearing app storage removes them. The personal edition has a separate offline privacy notice.