Privacy Policy

1. Controller

[to be completed], [to be completed], is responsible for the personal data processed in naulic tools. Contact for any privacy matter: [to be completed].

2. What we keep

• Account: your e-mail address and sign-in credentials (the password is stored only as a hash by our authentication provider), or, if you sign in with Google or GitHub, the identifier that provider gives us.
• Plan: whether you have a paid plan, its status and period end, and the customer and subscription identifiers of our payment provider.
• Usage count: for each calculation, which tool and when. This count is used for the free plan's daily limit and for the refund rule.
• Billing records: for each payment notification, its identifier, type and time, linked to your account.

3. Calculations and saved records

We store the figures of a calculation only when you save it. A saved record holds the inputs you entered and the result, under your account alone. You can export or delete your saved records at any time in the app; deleting your account removes them with it. A calculation you do not save is computed in memory and returned to you; it is not stored in our database and not written to our logs. Deleted records are removed from our database.

4. Why, and on what basis

• To provide the account and the Service you asked for (performance of a contract).
• To enforce plan limits, prevent abuse and keep the Service secure (legitimate interests).
• To keep billing records required by law (legal obligation).

We do not sell personal data, use it for advertising, or profile you.

5. Where, and service providers

The Service is hosted in the European Union: the database in Frankfurt (Germany), and the servers that run the calculations in the same region. These providers process data for us, only as needed for their part of the Service:

• Supabase: database and authentication.
• Vercel: hosting; it keeps technical request logs (such as IP address and time) for a limited period.
• Polar: our Merchant of Record for payments. Polar collects your payment and billing details directly, under its own privacy policy; we do not receive your card details.
• MapTiler: map tiles on the Voyage Estimator, loaded by your browser from MapTiler.
• Resend: delivers the messages you send through "Report an issue" to our inbox.
• Google and GitHub: only if you choose to sign in with them.

Polar, Resend and MapTiler, and Google and GitHub if you sign in with them, may process data outside the European Union, under the safeguards the law requires.

6. Storage in your browser

We store your sign-in session and your display preferences in your browser's local storage. These are necessary for the Service; we use no advertising or analytics cookies.

7. How long

Account, plan and usage data are kept while your account exists and deleted with it. Saved records are kept until you delete them or your account is deleted. Billing records are kept as long as the law requires, without your account link once the account is deleted. Messages you send us are kept in our inbox as long as needed to deal with them.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict its use, and to complain to a data protection authority. To use them, or to delete your account, write to [to be completed].

9. Changes

We will show the date of the latest version at the top of this page and tell account holders of material changes by e-mail.