Privacy Policy

We respect your privacy and collect only what is necessary.

UPDATED · April 2026

Data we collect

Account and identification

We use your email address, username, and password (hashed) solely to create and protect your account, and to send transactional notifications (verification, catch confirmations, events).

Sessions, catches and photos

Session and catch data you enter is stored in our database. Photos are stored in a private cloud storage (Cloudflare R2). They are accessible only to you and your group members, unless you explicitly enable public sharing.

GPS location

We collect GPS coordinates from catch photos only if you enable this in your profile settings. You can disable or delete location data at any time.

Technical data

We automatically log your IP address and browser type for diagnostics and abuse prevention. This data is not shared with third parties for advertising purposes.

Account deletion

You can delete your account yourself at any time from your profile settings (Settings → Delete account). Your profile and personal data are anonymised immediately — your name is replaced with 'Deleted user' and your email address is removed. Catches and sessions remain in anonymised form to preserve group statistics integrity. A hash of your email is retained solely to support account reactivation if you re-register.

Third-party services

We use trusted third-party services solely to operate the platform:

•Cloudflare R2 — private storage for catch photos; data stays within the Cloudflare network

•Cloudflare Web Analytics — anonymous visit analytics (no cookies, no cross-site tracking)

•Resend — delivery of transactional emails (account verification, catch confirmations, event notifications)

•Cloudflare Turnstile — form protection against bots; does not use tracking cookies

•Vercel — frontend hosting and Web Analytics (anonymous visit data, no PII collected)

•Open-Meteo — weather forecast based on GPS coordinates you provide; we do not send personal identifiers, only coordinates and technical query parameters required for forecast delivery

•Web Push (VAPID) — browser push notifications, only if you opt in; you can unsubscribe at any time

We do not sell your data or share it for advertising purposes.

Cookies we use

Essential cookies

These cookies are required for basic site functions such as login, session persistence and security. They cannot be disabled.

session — stores your login session

XSRF-TOKEN — protection against CSRF attacks

cookie-consent — stores your cookie choice

i18n_locale — stores your selected interface language

Analytics cookies

We use Cloudflare Web Analytics and Vercel Analytics for anonymous visit tracking. Both services do not set cookies and do not track users across sites. No personal data is collected. We do not use marketing cookies or display targeted ads.

Your rights (GDPR)

You have the right to: access the data we hold about you, correct inaccurate data, anonymise your account (directly from profile settings), and receive your data in a portable format. For other privacy enquiries, please contact us.

Privacy contact

For all privacy and data protection enquiries, contact us via the contact form or directly at info@myfishingcrew.com.