Privacy policy
Effective 9 October 2026
AnchorProof helps skippers, captains and yacht operators anchor safely in the Mediterranean while protecting Posidonia oceanica seagrass meadows. This policy explains what personal data we process when you use the AnchorProof website and app, why we process it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Greek data-protection law (Law 4624/2019).
We follow one rule throughout: collect only what each feature needs, keep it only as long as necessary, and never sell it. We don't use advertising, tracking or analytics cookies.
1. Who we are
The data controller responsible for your personal data is [to be completed], operator of AnchorProof ([to be completed] address).
Privacy contact: [to be completed].
2. What data we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Account data | Your name, email address and password (stored only as a secure hash), plus the dates you registered, confirmed your email and last signed in. | You, when you register |
| Single sign-on data | If you choose "Continue with Google, Microsoft or Apple": your name, email address and an account identifier from that provider. We never receive your password. Apple may give us a private relay address instead of your real email. | The provider you choose, with your permission |
| Bot-check signals | When you sign up, sign in, reset your password or delete your account, Cloudflare Turnstile checks browser and device signals to tell people from automated bots. | Your browser, through Cloudflare |
| Location data | Map positions you tap, and your device position when you choose "Locate me", "Assess here" or "Watch my position". See section 3. | You and your device (only with your permission) |
| Security and usage logs | Account events such as sign-ins and changes, with a salted hash of your network address (never the raw IP address) and your browser family. Technical server logs from our hosting provider. | Generated automatically |
| Error reports | If a page fails: the page address, error details, browser type and, if you are signed in, your email address, so we can follow up. | Generated automatically |
| Professional and booking data (full platform only) | Organisation and role, yachts, ownership and crew assignments, bookings and their positions and dates, anchoring assessments, service requests, berth quotes, reviews, agent or provider profiles, and any identity or ownership documents you upload. | You, your organisation, or the yacht owner or agent who invites you |
| Payment data (full platform only) | Amounts, dates, status and Stripe reference IDs. Card details are entered directly with Stripe; we never see or store your full card number. | You and Stripe |
| Communications | Messages you send us, for example through the contact form. | You |
The free public map only needs account data, location data (processed as described below) and security logs. The other categories apply only if you use the professional booking and operations features.
3. Location and GPS
- Location features only run after you allow location access in your browser, and only while the map is open. You can withdraw permission at any time in your browser or device settings.
- “Watch my position” checks your position on your device. To decide whether you are near a seagrass meadow, the app sends coordinates to our meadow service, which rounds them to a coarse grid; to public EMODnet services for water depth and meadow data; and to our weather service, which rounds them to about 100 m. We do not store your GPS track or link these lookups to your account.
- Alerts (banner, vibration, sound, and notifications if you allow them) are produced on your device. Notification permission is optional and can be withdrawn in your browser settings.
- Locations are stored only when you deliberately save something that needs one, such as a booking or an anchoring assessment on the full platform.
4. Why we use it (legal bases)
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account, signing you in, showing the map and its checks, and sending service emails (confirmation, password reset, security alerts, welcome) | Performance of our contract with you — Art. 6(1)(b) |
| Using your device location for "Locate me", "Assess here" and "Watch my position", and showing notifications | Your consent, given through your browser's permission prompt; you can withdraw it at any time — Art. 6(1)(a) |
| Bookings, payments, invoices, payouts and service jobs on the full platform | Contract — Art. 6(1)(b); keeping financial records afterwards is a legal obligation — Art. 6(1)(c) |
| Keeping the service secure, preventing fraud and abuse (including the Turnstile bot check on sign-up, sign-in, password reset and deletion), fixing errors, and keeping audit logs | Our legitimate interest in a safe, working service — Art. 6(1)(f) |
| Signing you in with Google, Microsoft or Apple, when you choose to | Performance of our contract with you — Art. 6(1)(b) |
| Establishing, exercising or defending legal claims | Legitimate interest — Art. 6(1)(f); Art. 17(3)(e) |
| Answering your messages and requests | Contract or legitimate interest, depending on the request |
| Business pre-release sign-ups (/partners): answering requests for information or a partnership | Steps you asked for before a possible contract — Art. 6(1)(b) |
| Launch-update e-mails to businesses that ticked the opt-in box | Your consent; you can withdraw it at any time (unsubscribe link or e-mail us) — Art. 6(1)(a) |
We don't make decisions about you that are based solely on automated processing and have legal or similarly significant effects. The map's anchoring verdicts are guidance only.
5. Who we share it with
We don't sell personal data. We share it only with service providers (processors) that work for us under contract and only for the purposes above:
| Provider | What for | Location |
|---|---|---|
| Supabase | Database, authentication and file storage | EU (Ireland) |
| Vercel | Website and app hosting, server logs | Global edge network (USA-based company) |
| Resend | Sending service emails | USA |
| Cloudflare (Turnstile) | Bot protection on sign-up, sign-in, password reset and account deletion | Global |
| Stripe (full platform only) | Payment processing and payouts | EU and USA |
| Cloudflare (full platform only) | Collecting publicly broadcast AIS vessel positions | Global |
Your browser also loads data directly from public map and data services. When it does, the service sees your IP address, as it would for any website you visit. These services are CARTO, OpenStreetMap or Esri for map tiles, and EMODnet (EU) for seabed-habitat, protected-area and depth data. Where weather is shown, it comes from Open-Meteo through our own server, so Open-Meteo does not see your IP address.
If you choose to sign in with Google, Microsoft or Apple, that provider authenticates you and shares the details listed in section 2 with us. Your use of their sign-in is also covered by their own privacy policies. You can stop using single sign-on at any time by deleting your account (section 9) or removing AnchorProof from your provider account's security settings.
On the full platform, some data is visible to other users because of how a feature works. For example, the yacht owner, agent or captain on the same booking can see it, and a marina or buoy operator can see bookings at their facility. Other organisations only see anonymised occupancy (a position and a radius). We may also disclose data when the law requires it, for example to tax authorities or under a court order.
6. International transfers
Our main database is in the EU. Where a provider processes data outside the European Economic Area (for example in the USA), we rely on an adequacy decision such as the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of these safeguards.
7. How long we keep it
| Data | How long |
|---|---|
| Account data | Until you delete your account |
| GPS positions from "Watch my position" and map lookups | Not stored against your account (processed only as described in section 3) |
| Security activity logs | 90 days, then automatically deleted |
| Other activity logs | 30 days, then automatically deleted |
| Hosting server logs | The hosting provider's short operational retention period |
| Bookings, payments, invoices, payouts and escrow records | As long as Greek and EU tax and accounting law requires (generally 5 years, longer if an audit or dispute is open) |
| Service jobs, charters, berth quotes and assessments linked to bookings | For the same period as the booking or payment record they belong to |
| Yacht ownership history | As long as needed for maritime-law traceability and disputes |
| Invitations | Until they are used or expire |
| Messages you send us | As long as needed to handle your request, and then for a limited period in case of follow-up |
| Business pre-release sign-ups | Until the launch updates are sent and your request is handled, or until you withdraw consent — whichever is first, and no longer than 24 months |
When a retention period ends, we delete the data or anonymise it irreversibly.
8. Your rights
Under the GDPR you have the right to:
- Access your data and get a copy of it (Art. 15). Use Download my data on your account page.
- Data portability (Art. 20). The download is a structured, machine-readable JSON file.
- Rectification (Art. 16). Correct your details in your account, or ask us to.
- Erasure (Art. 17). Delete your account yourself; see section 9.
- Restriction of processing (Art. 18) and objection to processing based on legitimate interests (Art. 21).
- Withdraw consent at any time, for example by turning off location or notification permission. This does not affect processing that already happened.
- Complain to a supervisory authority; see section 14.
You can use most of these rights yourself from your account page. For anything else, contact us at [to be completed]. We answer within one month. If a request is complex, we may extend this by up to two further months and will tell you why. We may need to confirm your identity first. Using your rights is free.
9. Deleting your account
You can delete your account at any time from Account & privacy. For your security, we first confirm it's you: with your password, or, if you sign in with Google, Microsoft or Apple, by asking you to sign in with them again. When you delete your account:
- Your login, name and email address are removed, and you can no longer sign in.
- Your profile, memberships, notifications, favourites, reviews, agent or provider profiles and uploaded documents are deleted.
- Activity-log entries are disconnected from your identity.
- Your name is removed from your personal organisation, and invitations, support requests and listing submissions made with your email address are deleted or anonymised.
Some records may have to be kept. The GDPR (Art. 17(3)(b) and (e)) allows us, and tax and accounting law requires us, to keep certain records after an account is deleted: payments, invoices, refunds, payouts, escrow entries, and the bookings and related records they belong to. Yacht ownership history and records needed for an open dispute may also be kept. These records are detached from your name, email and login, kept only for the required period (section 7), and then deleted. Before you confirm, the account page shows exactly which of these apply to you.
If you have an active booking, an unpaid payment request, funds held in escrow, an open service job or a yacht registered in your name, you must settle or transfer it first so that nobody else is left stranded. The account page explains what is outstanding.
10. Cookies and local storage
We use only what the service needs to work. These are strictly necessary, so no cookie banner is required:
- Authentication cookies (
sb-…) keep you signed in. - Language preference cookie remembers whether you chose English or Greek.
- Local storage and an offline cache on your device remember your map style and keep recently viewed map tiles, seagrass data and weather, so the map loads faster and works offline. Signing out clears cached personal data.
We use no advertising, analytics or cross-site tracking cookies. The Cloudflare Turnstile bot check runs only on the sign-up, sign-in, password-reset and account-deletion forms, and is used only for security.
11. Security
Data is encrypted in transit (HTTPS) and at rest. Access is restricted by role and enforced in the database with row-level security. Passwords are stored only as secure hashes. Identity documents are kept in a private storage area that only our server can reach. Sensitive actions such as deleting your account require your password again.
If a personal-data breach is likely to put your rights at risk, we will notify the supervisory authority within 72 hours, and notify you without undue delay if the risk is high.
12. Children
AnchorProof is meant for adults involved in boating and yachting. It is not directed at children under 15, the age of digital consent in Greece. We don't knowingly collect their data. If you believe a child has registered, contact us and we will delete the account.
13. Changes to this policy
We will update this policy when our services or the law change. The effective date at the top always shows the current version. If a change is significant, we will tell you by email or in the app before it takes effect.
14. Contact and complaints
For any privacy question or request, contact [to be completed].
You also have the right to complain to the Hellenic Data Protection Authority (HDPA), Kifisias 1–3, 115 23 Athens, Greece — www.dpa.gr, or to the supervisory authority in the EU country where you live or work. We would appreciate the chance to address your concern first.