Privacy Policy

Only these four things, and three of them are your choice:

Your location stays on your device.If you use "Near me" and allow location access, your coordinates are used inside your browser to sort spots by distance. They are never sent to us, never stored, and never attached to an analytics event.

Analytics tell us which parts of the site actually get used, so we fix the parts that do not. Email and push details exist to send you the alert you asked for, to manage your subscription (including not asking again for an address we already have), and to let you stop it. We do not use any of it for anything else.

We are one person, not a company with a data centre. These services run parts of the site and handle your data on our behalf:

• Vercel hosts the site and sees the requests your browser makes to it.
• Supabase is the database that stores email subscriptions and push subscriptions.
• PostHog (United States) processes the analytics described above.
• Resend delivers the alert emails.
• The National Weather Service provides the forecasts. We ask it about the weather at a spot, never about you.

We do not sell or share your data with anyone else.

PostHog sets a cookie, plus a local-storage entry, to hold the random analytics ID described above. We set no advertising cookies and no cross-site cookies, and no third party collects information about what you do on other websites through this one. Blocking cookies for this site costs you nothing: everything still works, and we simply cannot tell your second visit from your first.

Some browsers can send a "Do Not Track" signal. There has never been a common standard for what it should mean, and this site does not currently respond to it. We would rather say that plainly than imply a protection you are not getting. Blocking cookies for this site is the reliable way to opt out.

Unsubscribing stops the emails immediately. We keep the record, marked unsubscribed, so that we do not email you again by mistake and so we can tell how many people stay subscribed. It is not deleted automatically. If you want it gone entirely, ask us and we will delete it.

Push alerts stop as soon as you turn off notifications. Your browser stops accepting them right away, and we mark the subscription dead the next time we try to send to it. That record is not deleted automatically either. Same offer: ask, and it is gone.

Records of which alerts we sent and which you opened sit alongside your subscription and go with it when we delete it. Analytics data is retained by PostHog under its own retention schedule. Saved spots live on your device, so they last until you clear your browser storage.

• Stop emails: use the unsubscribe link in any alert. One click, no login, and the emails stop immediately.
• Stop push alerts: turn off notifications for this site in your browser or phone settings.
• Clear saved spots:clear this site's data in your browser.
• Opt out of analytics:block cookies for this site, or use your browser's tracking protection. Both work, and neither breaks anything.
• Ask us for a copy, a correction, or a deletion: email hello@paddletowater.com and we will do it. You do not have to live in a particular state, and you do not need a reason.

This site is meant for adults planning a paddle. It is not directed at children, and we do not knowingly collect anything from anyone under 13. If you believe a child has given us their email address, write to us and we will delete it.

If we start collecting something new, we will update this page and change the date at the top before we collect it, not after.

Questions, or want your data gone? Email hello@paddletowater.com.