Nock-Nock
Nock-Nock is a free web app for shooting archery matches against another archer, wherever they are. To make that work it has to store a few things: your archer name, your matches and your arrows. This page explains exactly what is stored, who can see it, what advertising and cookies are involved, and what you can ask us to do with your data.
Last updated: 28 September 2026 (country flags added)
Who is responsible
Nock-Nock is made and run by Marcel van Apeldoorn in the Netherlands, who is responsible for the personal data described on this page (the “controller” under the EU General Data Protection Regulation, GDPR). For anything about privacy, email privacy@vapeldoorn.net.
What we store and why
| What | Why |
|---|---|
| Archer name you choose | Shown to your opponent and on the stats page. It doesn't have to be your real name. |
| Recovery code (only a one-way hash of it) | So you can log in on another device. We cannot read the code itself; if you lose it, it can only be replaced. |
| Login tokens (only a one-way hash) | Keep each of your devices logged in. |
| A random device id | Recognises your phone as the same participant if the app is closed and reopened during a match. |
| Matches, ends and arrows: where each arrow landed, the scores, the result and the time | The match itself: scoring, results, shoot-offs and the history. |
| Your rating per bow type, and the change per rated match | Rating and matchmaking. See how the rating works. |
| Chat messages sent during a match | Shown to the two archers in that match only. |
| Your location, once at the start of a match, only if you allow it in your browser | To work out how far apart the two archers were, and in which country each archer was. The country is looked up on our own server; no location is sent to anyone else. The coordinates never leave the server: only the distance in kilometres and the country are shown. |
| Waiting in matchmaking: round, bow type and rating | To pair you with an opponent. A search expires after 25 minutes. |
We don't ask for your email address, real name, age or phone number, and we don't sell or share your data with anyone for their own use. Our legal basis is providing the service you asked for (GDPR article 6(1)(b)); for location, it is your consent, which you can withdraw at any time in your browser's site settings.
Matches that never start are deleted automatically after 30 minutes. Other data is kept while your account exists, because your rating and the stats page are built from it.
Server logs
Like almost every website, our web server writes technical logs (IP address, date and time, the page requested, browser type) to keep the service secure, fight abuse and fix problems. Rate limiting uses your IP address briefly, in memory. Logs are rotated and deleted automatically after a short period and are never used to build profiles.
What is public
The stats page can be opened by anyone. It shows archer names, ratings, high scores, how many matches archers played, the rounds and results of recent matches, and for matches where both archers allowed location: the distance between them and the country each archer was in when the match started (as a flag next to their name). It never shows chat messages (only whether a chat took place) or anyone's exact location.
What is kept on your device
The app stores a few things in your browser's local storage:
nocknock_account: your archer name and login token, so you stay logged in;nocknock_device_token: the random device id described above;nocknock_theme: whether you picked the light or dark look.
These are needed for the app to work and are never used for tracking. The app also keeps a copy of its own files in the browser cache so it opens quickly and works on a weak connection. Clearing your browser's site data for this website removes all of it (you will then need your recovery code to log in again).
The app loads its fonts from Google Fonts, which means your browser contacts Google's servers and they see your IP address. See Google's privacy policy.
Advertising and cookies
Nock-Nock is free and paid for by advertising. Ads are served by Google AdSense. Google and its partners use cookies and similar technologies to show ads, to measure them and, if you agree, to personalise them based on your visits to this and other websites.
- Visitors in the European Economic Area, the United Kingdom and Switzerland are first asked for consent through Google's consent message. You can change your choice at any time through the privacy link or icon it shows.
- Read how Google uses information from sites that use its services.
- You can turn personalised ads off in Google's My Ad Center, or opt out of many third-party ad vendors at aboutads.info and youronlinechoices.eu.
Ads appear on the information pages, the stats page and at the bottom of the match screen in the app, below everything you use to score. Nock-Nock itself sets no advertising or analytics cookies.
Your rights
Under the GDPR you can ask to see the data we hold about you, to have it corrected or deleted, to receive a copy, or object to how it is used. There is no delete button in the app yet: email privacy@vapeldoorn.net with your archer name and we'll delete your account within a month. We may ask you to show that the account is yours first. Never send us your recovery code.
If you think we handle your data wrongly, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the authority in your own country.
Children
Nock-Nock is meant for archers aged 16 and over. Younger archers should use it with permission from a parent or guardian.
Changes
When this policy changes, we update the date at the top of this page.