Privacy policy

CruiseProof is operated by [TRADING NAME — TO BE COMPLETED], [TRADING ADDRESS — TO BE COMPLETED]. We are the data controller for the information described here. You can reach us at karol24899@gmail.com.

Your account. Your email address and a one-way hash of your password. We never store the password itself and cannot recover it.

Your boat. The name, index number and dimensions you enter, and the renewal dates you choose to record.

Your moorings. The coordinates, dates, place names and notes you record. We are conscious that for a liveaboard this is a record of where you have slept, which is why it is never shared or published, and why the section on retention below matters.

Payments. Handled entirely by Stripe. We receive a customer reference and your subscription status. We never see or store your card details.

Almost everything here is processed because it is necessary to perform our contract with you: without your moorings there is no log, and without your email there is no account.

We rely on legitimate interests for keeping the service secure and preventing abuse, and on legal obligation for keeping records of payments.

One cookie, which keeps you signed in. It is strictly necessary for a service you have asked for, so it does not require consent and there is no banner asking for it.

We use Vercel Web Analytics to count visits and see which pages are read. It is cookieless: it stores nothing on your device and does not build a profile of you or follow you to other sites. Because nothing is stored on your device, no consent banner is required, which is why you are not being asked to dismiss one.

We use no advertising trackers and no third-party tracking beyond that. If that ever changes we will say so here first.

Vercel (hosting and cookieless visit measurement), Neon (the database, hosted in London), Stripe (payments) and Resend (email). Each acts on our instructions under a data processing agreement.

Some of these organisations are based outside the UK, and where data is transferred it is protected by UK adequacy regulations or standard contractual clauses.

Your log is kept for as long as your account exists, because a cruising record is only useful over years — a licence assessment can look back across a full licence period.

If you delete your account we remove your moorings, boat and account details within 30 days. Payment records are kept for six years because tax law requires it.

Under UK GDPR you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable form. The cruising log export gives you most of this directly, and you can ask us for the rest at any time.

If you think we have handled your data badly, please tell us first — but you also have the right to complain to the Information Commissioner's Office at ico.org.uk.

If we change this policy in a way that affects you, we will say so on this page and, where the change is significant, by email.