Privacy Policy

This Privacy Policy describes how Stoner Physics LLC (“Stoner Physics,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with our websites and mobile applications (collectively, the “Services”).

By using the Services, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

1. Information we collect

Information you provide

We collect information you voluntarily submit, such as when you contact support by email. This may include your email address and the contents of your message.

Information collected automatically

Our mobile applications contain no analytics, advertising, crash-reporting, or telemetry software; they do not send usage, diagnostic, or behavioral data to us or to anyone else, and no Stoner Physics server receives data from the apps. The apps do not collect or transmit your device model, operating system version, usage or behavioral analytics, crash logs, or any advertising or device identifier.

In the apps, the only information that leaves your device automatically is what is inherent to downloading map, satellite, and elevation tiles from the third-party providers listed under “GPS Spoofer” below: your IP address (visible to any internet service you connect to) and the application version, sent in the request’s User-Agent header. No account, cookie, or device identifier is attached to those requests.

Location. GPS Spoofer sets (injects) a location for other apps to read; to operate, it does not read or transmit your real device location. Precise-location permission is used on your device only — to create the mock-location providers and to display live GNSS satellite information — and your real location and GNSS data are never sent off the device. What an application keeps (favorites, history, routes, schedules) stays on your device.

Website hosting

We use Cloudflare Web Analytics to measure visits, page views, referring sites and page performance without analytics cookies or persistent visitor identifiers. We do not use PostHog or session recordings on the website. Our measurement loader respects Do Not Track, Global Privacy Control and previously saved opt-outs. You can turn off visit measurement for this browser; this saves only your exclusion preference locally. Visit totals are estimates and do not identify individual people. Cloudflare hosts and protects the website and processes connection information, including IP addresses, to deliver pages and maintain security. Stripe processes purchases as described below.

We also count engaged page visits when a page has been visible for at least ten seconds and receives a click, tap or keypress. This sends the page path, visible duration and an interaction flag to our Cloudflare-hosted endpoint; the aggregate dataset stores only the event type, page path, count and timestamp. It stores no IP address, typed text, persistent identifier or individual browsing history. The same browser exclusions and privacy preferences apply. These counts indicate interaction, not verified or unique people.

We also count each page load ourselves, so that we can see exactly how many people arrived by a link we published (for example stonerphysics.net/yt). The page sends only its own path to the same endpoint; the aggregate dataset stores only the event type, page path, count and timestamp, and no referrer, country, IP address or identifier. The same browser exclusions and privacy preferences apply. These counts are page loads, not unique people.

GPS Spoofer

GPS Spoofer changes the location your device reports to other applications, using Android’s mock-location system: you choose a location and the app injects it. It has no user accounts, no sign-in, and shows no ads. Your spoofed locations, favorites, routes, history, and schedules are stored only on your device and are never transmitted to us or, for our purposes, to any third party.

To show maps and terrain, the app downloads tiles directly from the third-party services below. Each request exposes your IP address to that service (as any internet request does) and includes tile coordinates. Those coordinates reflect the area you are viewing on the map or globe, or the location you are spoofing (for elevation) — never a reading of your real position. Place search runs entirely on your device from a bundled dataset; no geocoding server is contacted.

• OpenFreeMap (tiles.openfreemap.org) — vector map tiles, fonts, and road/label overlays
• EOX IT Services (tiles.maps.eox.at) — Sentinel-2 cloudless satellite mosaic (global base layer)
• NASA GIBS (gibs.earthdata.nasa.gov) — Blue Marble satellite imagery and reference overlays
• Amazon Web Services (s3.amazonaws.com/elevation-tiles-prod) — the AWS Open Data “Terrarium” ground-elevation tileset

Where regional aerial imagery is available, the satellite view also downloads tiles from the following government and public-sector services. Each request exposes only your IP address and the tile coordinates (the area you are viewing); no account, cookie, or device identifier is sent.

• USGS (basemap.nationalmap.gov, imagery.nationalmap.gov) — United States base imagery and NAIP aerial photos
• PDOK (service.pdok.nl) — Netherlands orthophotos (Kadaster)
• basemap.at (mapsneu.wien.gv.at) — Austria orthophotos (Geoland.at)
• swisstopo (wmts.geo.admin.ch) — Switzerland orthophotos
• NGI Belgium (wmts.ngi.be) — Belgium orthophotos
• Géoportail Luxembourg (wmts1.geoportail.lu) — Luxembourg orthophotos
• GUGiK (mapy.geoportal.gov.pl) — Poland orthophotos
• ČÚZK (ags.cuzk.gov.cz) — Czech Republic orthophotos
• GURS (ipi.eprostor.gov.si) — Slovenia orthophotos
• PNOA (tms-pnoa-ma.idee.es) — Spain aerial photos (IGN)
• DGT (cartografia.dgterritorio.gov.pt) — Portugal orthophotos
• Regione Lazio (geoportale.regione.lazio.it) — Lazio (Rome) orthophotos
• BayernAtlas (wmtsod1.bayernwolke.de) — Bavaria orthophotos
• Geobasis NRW (www.wms.nrw.de) — North Rhine-Westphalia orthophotos
• HVBG Hessen (www.gds-srv.hessen.de) — Hesse orthophotos
• LGLN Niedersachsen (opendata.lgln.niedersachsen.de) — Lower Saxony orthophotos
• LGV Hamburg (geodienste.hamburg.de) — Hamburg orthophotos
• Berlin SenSBW (gdi.berlin.de) — Berlin orthophotos
• GSI Japan (cyberjapandata.gsi.go.jp) — Japan seamless aerial photos (Geospatial Information Authority)
• Spatial Services NSW (portal.spatial.nsw.gov.au) — New South Wales orthophotos
• QSpatial (spatial-img.information.qld.gov.au) — Queensland orthophotos
• Ontario GeoHub (ws.lioservices.lrc.gov.on.ca) — Ontario orthophotos
• City of Toronto (gis.toronto.ca) — Toronto orthophotos

Because Android’s built-in backup is enabled for the app, if you have device backup turned on, Android may copy the app’s on-device data to your own Google account. That is Android’s backup, controlled by you — not a transfer to us.

The Google Play edition (labelled “Limited”) does only what is described above.

Full edition (sold on this website, not on Google Play). The Full edition adds features that run entirely on your device and do not communicate with any external server: it can patch an app you choose so it sees an ordinary location (using a bundled copy of LSPatch), run an app inside an on-device container (a bundled copy of the open-source BlackBox), and, on a rooted phone, install a Magisk/Zygisk module that intercepts location checks. To offer these, the Full edition checks which of a small list of apps are installed on your device; that list is used only on-device and is never transmitted. To warn you when your network country does not match your spoofed location, the Full edition’s detection test makes a single request to Cloudflare (cloudflare.com/cdn-cgi/trace) that returns your IP-based country code; nothing beyond your IP address (inherent to the request) is sent. None of these Full-edition features, permissions, or checks are present in the Google Play edition.

Purchases

When you purchase an application or edition through our website, payment is processed by Stripe, Inc. We do not receive, store, or have access to your payment card details. Stripe’s handling of your payment information is governed by the Stripe Privacy Policy. We receive your name and email address from Stripe solely to deliver your purchase (for example, sending a download link). We retain this information for order records and support.

Information we do not collect

We do not collect precise geolocation, contacts, photos, microphone input, or health data unless an application explicitly requests that permission and you grant it. Permission requests are always tied to a feature you have chosen to use.

2. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Services;
• Fix defects that you or others report to us, and improve reliability and performance;
• Respond to your support requests and communicate with you about the Services;
• Detect, investigate, and prevent fraud, abuse, and security incidents; and
• Comply with applicable legal obligations.

3. Legal bases for processing

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the following legal bases: performance of a contract (providing the Services you requested), our legitimate interests (maintaining security, diagnosing defects, and improving our products), your consent (where required, such as for optional permissions), and compliance with legal obligations.

4. How we share information

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising.

We disclose information only in the following circumstances:

• Service providers. We use a limited number of vendors to operate the Services — for example, application distribution (Google Play), payment processing for website purchases (Stripe), transactional email for website purchases (Resend), map and satellite imagery (OpenFreeMap, EOX IT Services, NASA GIBS, and the government aerial-imagery services listed under “GPS Spoofer”), elevation data (Amazon Web Services), and — for the Full edition’s detection test only — a network-country lookup (Cloudflare). These providers process data on our behalf or serve publicly available data; where applicable, they are contractually restricted from using your data for their own purposes.
• Legal requirements. We may disclose information where required by law, subpoena, or other valid legal process, or where we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. If Stoner Physics LLC is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. Because the applications collect no analytics, crash, or diagnostic data, there is nothing of that kind for us to retain. Support correspondence and website purchase records are retained for as long as necessary to resolve your request, meet our record-keeping obligations, and maintain a record of the resolution.

6. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children’s privacy

Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent where processing is based on consent. Residents of California, Colorado, Connecticut, Virginia, and certain other jurisdictions have additional rights under state privacy laws, including the right to be free from discrimination for exercising those rights.

To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on your request.

You may also delete an application at any time, which removes all data stored locally on your device.

9. International transfers

We operate in the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. Third-party links and services

The Services may link to third-party websites or services that we do not control. This policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party service you use.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide more prominent notice, such as an in-application notice. Your continued use of the Services after an update constitutes acceptance of the revised policy.

12. Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

Stoner Physics LLC
Attn: Privacy
1150 E B St
Casper, WY 82601
United States
[email protected]