Privacy policy

Controller

• Alonso Montalvo Arias
• elclubdelanzuelo@gmail.com

Data we process

• Account: email, password (hashed, we never see it), display name and language.
• Logbook: your spots (name and coordinates), trips, catches, notes and techniques.
• Forecast use: the coordinates you look up and your IP address, needed to answer and to prevent abuse.
• Browser preferences: language and last spot viewed.
• Visit statistics: the page viewed, the website you came from, your approximate region and device type. No cookies and nothing stored in your browser. Your IP is only used at that moment to compute a code that changes every day; the IP is not stored and the code cannot tell who you are or follow you from one day to the next.
• If you write to our Telegram bot: your message and Telegram ID, only to reply to you at that moment; we do not store them.

Purposes and legal basis

• Providing the service (account, logbook, personalised forecast): performance of the contract you accept when signing up (Art. 6.1.b GDPR).
• Security and abuse prevention (technical logs, rate limiting): legitimate interest (Art. 6.1.f).
• Visit statistics, to know what is used and improve the website: legitimate interest (Art. 6.1.f). If you turn on Do Not Track or Global Privacy Control in your browser, we do not count your visits.
• We do not sell your data or use it for personalised advertising.

Your spots are private

Only you can see your spots, trips and catches. The database enforces this with per-user security rules, not just the website.

Processors acting on our behalf

• Supabase (accounts and database) – servers in the EU (Paris).
• Vercel Inc. (website hosting) – may process technical data outside the EU under standard contractual clauses.
• Railway Corp. (forecast server) – servers in the EU (Amsterdam); as a US company, it may process technical data outside the EU under standard contractual clauses.
• OpenFreeMap (maps): your browser downloads map tiles directly from their servers.
• Open-Meteo only receives coordinates from our server, never your IP or identity.

Retention

We keep your data while you have an account. If you delete it, your data is removed immediately and irreversibly (except provider backups, which expire in their normal cycle).

Your rights

You can access, rectify, erase, object, restrict and port your data. From "My account" you can download all your data and delete your account instantly; for anything else, email elclubdelanzuelo@gmail.com.

You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Minimum age

You must be at least 14 years old to create an account.