Privacy policy

Last updated 20 October 2026

This page is a draft. Before BouncePlus goes live, its owner still needs to add who runs BouncePlus, a contact email, the governing law and the minimum age.

"We" and "us" in this policy mean the people who run BouncePlus. This policy explains what we collect when you use BouncePlus, why, who can see it, and what you can do about it.

The short version

What we collect

Your account

Your email address, your username and your password. We never store the password itself, only a salted scrypt hash of it, which cannot be turned back into the password.

We email you for two reasons only: to confirm your address when you sign up, and to send a link to choose a new password when you ask for one. No newsletters and no marketing. The links in those emails work once and expire, after 3 days for confirming and an hour for a new password.

Your profile and measurements

The answers you give in the intake: your height, body weight, standing reach, standing and approach vertical, reactive strength index (RSI), deep squat max, the equipment you train with, where you are in your season, how you handle recovery, how many days a week you train, and whether you use inches or centimetres. We also keep every measurement you log over time, with the date it was taken and any note you add.

Some of this, like your body weight, can count as health information in some places. We use it only to work out your training focus and build your plan.

Your training

The sets you tick off, the weights and reps you log, the exercises you swap, the training focus you choose, your deload weeks, and a record of these changes over time. When you finish a training day we keep a record of it: the exercises on it and the sets you did. If you post it, we also keep the weights you add to it and anything you write with it.

Technical information

When you use BouncePlus, your device sends us its IP address. We use it only briefly, to limit repeated sign-up and login attempts, and we do not store it with your account. The company that hosts BouncePlus may keep standard server logs.

How we use it

What other athletes can see

Any signed-in athlete can search for you by username and see your profile. That means your username, your intake numbers (height, body weight, standing reach, verticals, RSI and deep squat max), your setup, your training focus and how it was worked out, your measurement history with dates, and the badges worked out from it. If your account is private, they can still find your username, but all they see is that your profile is private, not what is in it.

When a measurement beats your previous best for that metric, it also appears in the community achievements feed, with your username, the new number, the old one and the dates of both. Joining a badge club appears there too, with the measurement that took you into it and the club you were in before. The clubs your first numbers put you in are not announced. If you make your account private ("Private account", under Your account at the bottom of your profile), none of your personal bests or badge clubs appear in that feed for anyone but you. A workout you choose to post still appears in the community feed. That feed is worked out from the same measurement history, so it shows nothing more about you, and correcting or removing a measurement changes it too. Body weight, height, standing reach, relative strength and touch heights never appear there.

Workouts you post appear in the community feed: your username, the day you did the workout, its exercises and the sets you did, the weights you added and anything you wrote with it. A workout is only posted if you post it, one at a time, and you can take a post down whenever you like, from the feed or from your week.

They cannot see your email address, the notes you add to your measurements, the weights and reps you log, your weekly plan, or the sets you have ticked off, except in a workout you post. Choose a username you are comfortable sharing. People who are not signed in cannot see any profile or post.

Cookies and storage on your device

BouncePlus sets one cookie, bp_session, which keeps you signed in. It is essential, so it does not need your permission. It lasts up to 30 days, or until you log out.

We also keep a few things in your browser's local storage: a copy of your intake answers so an unfinished intake is not lost (cleared when you log out), your cookie choice, and a note that this device has been signed in on before, so the login page leads with logging in.

If you choose "Allow analytics" in the cookie banner, each page you open is counted. We record only which page it was (never your username or anyone else's), the website that sent you if there was one, and the date. No cookie, IP address or account is attached to the count. You can change your choice at any time: .

Who we share it with

We do not sell your data or share it with advertisers. It is stored with the company that hosts BouncePlus, which handles it only on our behalf. The emails we send go through an email delivery service, which handles your address and the message only to deliver it. We may disclose information if the law requires it. BouncePlus loads no third-party scripts, fonts or trackers.

How long we keep it

We keep your account, profile and training history until you delete your account, which removes all of it at once. Login sessions expire after 30 days. Page-visit counts cannot be linked to anyone, and we keep them until we delete them.

Your choices and rights

You can see and correct your numbers in BouncePlus at any time. You can also delete your account yourself: "Delete my account", under Your account at the bottom of your profile, removes your account and everything in it from BouncePlus straight away. It asks for your password first, and it cannot be undone.

You can also ask us for a copy of your data, or object to how we use it. Depending on where you live, you may also have the right to complain to your data protection authority.

Contact details for making a request will be added here before BouncePlus goes live.

How we protect it

Passwords are stored only as salted hashes, login sessions are stored only as hashes of their tokens, connections use HTTPS, and repeated login and sign-up attempts are limited. No system is perfectly secure, but we work to keep yours safe.

Changes to this policy

If we change this policy, we will update the date at the top. If a change affects how your data is used or who can see it, we will tell you in BouncePlus before it takes effect.

Contact

Contact details will be added here before BouncePlus goes live.