The app and its developer
This policy describes how 3rd Attempts, the Android powerlifting app developed and operated under TotalDevel, handles information. The Android application ID is com.totaldevel.thirdattempts.
For app support, privacy questions, or a request about your information, email info@3rdattempts.com. The developer checks this inbox and handles requests personally.
3rd Attempts is an independent project. Competition records originate from OpenPowerlifting. OpenPowerlifting does not sponsor or endorse TotalDevel. Published athlete records can identify athletes; they are distinct from information you provide while using the app.
Information on your device
Preferences, remembered browsing choices, saved athletes, named ranking presets, manual total goals, and benchmark observation history are stored on your device. Saved-athlete observations, prior results, derived changes, observation and source dates, update history, and custom watch-group names and membership are also stored locally. Pro access reveals retained history and comparisons.
There is no app account or automatic cloud synchronization. Automatic Android cloud backup and device transfer remain disabled. To recover saved local records, you must retain a file exported with the manual Backup & restore feature described below.
The app keeps HTTP responses in app-private storage to reduce repeated downloads. Cached responses do not eliminate network requests.
The current app includes no advertising, Firebase, or app analytics SDK. It does not request camera, location, or broad storage access. Internet, network, and normal Google Play Billing permissions support its features.
Backup and restore
The free Backup & restore feature lets you manually export a readable JSON file or import one through Android’s document picker. You choose the destination, which may be local Files or a configured cloud document provider such as Google Drive. That provider handles the copy under its own policies. There is no app-operated backup server or automatic synchronization.
Backup files include saved records and portable preferences, including language, theme, and units. They exclude Play ownership, purchase tokens, API caches, device-specific browsing history, and generated images or PDFs. Pro ownership is restored separately through Google Play.
Import validates the file and replaces local records only after your explicit confirmation. Removing data from the app does not delete backup files you saved elsewhere; delete those copies in the selected provider.
Statistics and benchmark requests
The app requests competition statistics over HTTPS from https://api.3rdattempts.com/api/v1. Requests contain searches, athlete or meet identifiers, and the ranking or category filters you select. These inputs leave your device so the service can return the requested records.
When you evaluate a total goal or a Pro what-if total, the comparison total is sent in integer grams, together with your selected population filters, to calculate a benchmark. Goal names and saved observation history remain local. Benchmark evaluation therefore includes server processing.
Saved-athlete updates make bounded foreground profile and history requests for saved athlete identifiers and their sex, event, and equipment contexts, including pagination and snapshot parameters. Successful observations have a 24-hour automatic cooldown; you can request a refresh manually. Requests stop when the app goes into the background. Watch-group names, local update history, and purchase data are not sent to the statistics API. This feature adds no cloud scheduler or push notifications.
TotalDevel operates the statistics API on the developer’s personal server. Cloudflare provides the HTTPS edge, tunnel, security, and caching services. Cloudflare receives the network request, including its address, headers, path, and query parameters; our server receives requests that reach the origin. IP addresses are used for network delivery and abuse prevention, including request rate limits.
Operational logs and retention
The API gateway records request method, a general route label, response status, response time, and response size. Its routine access log excludes visitor IP addresses, raw searches, athlete and meet identifiers, query strings, and comparison totals. Application logs record request IDs, route labels, snapshot IDs, timings, row counts, cache outcomes, and sanitized error codes. These records help diagnose failures and maintain service performance. Administrator access to the hosting and monitoring systems is required to read them.
The API gateway and application keep rotating local logs, configured for up to three files of 10 MB per container. Rotation depends on log volume, rather than a fixed number of days. The monitoring log store is configured for 48-hour retention, with asynchronous cleanup; this does not guarantee deletion of every copy exactly 48 hours after a request.
Critical infrastructure errors can produce additional diagnostic records. Cloudflare also processes traffic and security information, including IP addresses and routing information, under its privacy policy. We have not established a single fixed retention period for all Cloudflare records, infrastructure diagnostics, or operator-held diagnostic copies. Do not interpret the sanitized API access log or its rotation limits as a promise that no provider records exist.
Google Play purchases
Pro is a one-time purchase through Google Play. Google collects payment information and processes the transaction. The app uses Google Play Billing to check ownership and acknowledge purchases, uses purchase tokens for those operations, and caches a Pro ownership flag locally.
There is no separate TotalDevel payment or purchase-verification backend. The app does not send receipts, purchase tokens, or payment details to the statistics API. Google retains payment and transaction information under its own policies; see Google’s privacy policy. Clearing app data or uninstalling does not cancel or refund a purchase or delete Google’s transaction records. Use Google Play’s purchase, refund, and privacy controls for those records.
Support email
If you email info@3rdattempts.com, the developer receives your email address, message, attachments you choose to include, and the email’s delivery information. This information is used to answer support and privacy requests.
Cloudflare Email Routing forwards incoming email to the developer’s Gmail inbox, provided by Google. Correspondence remains in that inbox without an automatic deletion deadline, unless the developer deletes it or you request deletion. Send a deletion request to the same support address; the developer handles it manually and will explain any information that must be retained or cannot be removed. Provider backup and security records follow the providers’ own retention practices.
When you visit this policy or the portfolio
This section concerns the website, separately from the Android app. The TotalDevel website serves static HTML, styles, images, and locally hosted fonts. This public policy page has no app account, analytics script, advertising, support form, or embedded third-party content. The page itself sets no cookies and makes no third-party asset requests.
Cloudflare provides HTTPS delivery and security. The website origin is hosted on Oracle Cloud Infrastructure. Origin access logs contain connection addresses, timestamps, requested paths and query strings, response status and size, referring pages, and browser user-agent information. They are used for operation and troubleshooting, are accessible to server administrators, and currently have no automatic time-based deletion deadline.
The portfolio’s homepage, product page, and this privacy page are publicly readable without signing in. Analytics injection is disabled for the website, and its security policy blocks page scripts. Cloudflare security features may process traffic information or set necessary security cookies; see Cloudflare’s cookie information. There is no marketing-cookie acceptance requirement to read this policy.
Deletion, choices, and privacy requests
Remove saved entries or goals using the app’s available controls. Android’s Clear storage/Clear app data action removes local app records; clearing cache removes cached files. Uninstalling removes app-private data. Since the app has no account, there is no app account-deletion endpoint.
These actions do not delete manual backup files or copies you exported or shared, support correspondence, infrastructure logs, source competition records, or Google Play transaction records. They do not cancel or refund a purchase. Delete backup files in the document provider you selected and other external copies in the receiving service, request support-email deletion from the developer, and use Google’s controls for Google-held records.
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal information, or to object to processing or complain to a privacy regulator. Email info@3rdattempts.com to make a request. Describe the information and service involved; avoid sending unnecessary sensitive information. The developer will assess applicable rights, verify a request where needed, and explain relevant limits, including records that cannot be reliably linked to an individual.
If a published athlete record concerns you, contact the developer about its use in this service. Removing a saved athlete from your device does not change the underlying competition record or remove it from OpenPowerlifting.
Security and service providers
Network requests use HTTPS. Local records and temporary exports use app-private Android storage. The website and API origins are reached through Cloudflare tunnels; administrative systems are restricted. These measures reduce risk, but no storage or transmission system can guarantee absolute security.
Information is handled by the providers described above and by a recipient when you choose to share an export or open an external service. Providers may process information in countries where they operate. Their privacy terms and retention controls apply to their own records. TotalDevel does not add advertising or sell app-user information.
Changes to this policy
Updates will be published at this same URL with a revised effective date. Material changes requiring additional notice or consent will be communicated as applicable. This policy describes the current app and infrastructure; it will be updated when their information-handling practices change.
This policy is available in English, Spanish, Portuguese, French, German, and Russian. All language versions describe the same practices and share the effective date shown above. If a language is unavailable, English is the fallback.