Privacy Policy
We respect your privacy and collect only what is necessary.
Last updated: April 2026.
Data we collect
Account and identification
We use your email address, username, and password (hashed) solely to create and protect your account, and to send transactional notifications (verification, catch confirmations, events).
Sessions, catches and photos
Session and catch data you enter is stored in our database. Photos are stored in a private cloud storage (Cloudflare R2). They are accessible only to you and your group members, unless you explicitly enable public sharing.
GPS location
We collect GPS coordinates from catch photos only if you enable this in your profile settings. You can disable or delete location data at any time.
Technical data
We automatically log your IP address and browser type for diagnostics and abuse prevention. This data is not shared with third parties for advertising purposes.
Account deletion
You can delete your account yourself at any time from your profile settings (Settings → Delete account). Your profile and personal data are anonymised immediately — your name is replaced with 'Deleted user' and your email address is removed. Catches and sessions remain in anonymised form to preserve group statistics integrity. A hash of your email is retained solely to support account reactivation if you re-register.
Third-party services
We use trusted third-party services solely to operate the platform:
- Cloudflare R2 — private storage for catch photos; data stays within the Cloudflare network
- Cloudflare Web Analytics — anonymous visit analytics (no cookies, no cross-site tracking)
- Resend — delivery of transactional emails (account verification, catch confirmations, event notifications)
- Cloudflare Turnstile — form protection against bots; does not use tracking cookies
- Vercel — frontend hosting and Web Analytics (anonymous visit data, no PII collected)
- Open-Meteo — weather forecast based on GPS coordinates you provide; we do not send personal identifiers, only coordinates and technical query parameters required for forecast delivery
- Web Push (VAPID) — browser push notifications, only if you opt in; you can unsubscribe at any time
Cookies we use
Essential cookies
These cookies are required for basic site functions such as login, session persistence and security. They cannot be disabled.
- session — stores your login session
- XSRF-TOKEN — protection against CSRF attacks
- cookie-consent — stores your cookie choice
- i18n_locale — stores your selected interface language
Analytics cookies
We use Cloudflare Web Analytics and Vercel Analytics for anonymous visit tracking. Both services do not set cookies and do not track users across sites. No personal data is collected.
Marketing cookies
We do not use marketing cookies or display targeted ads.
Your rights (GDPR)
You have the right to: access the data we hold about you, correct inaccurate data, anonymise your account (directly from profile settings), and receive your data in a portable format. For other privacy enquiries, please contact us.
Privacy contact
For all privacy and data protection enquiries, contact us via the contact form or directly at info@myfishingcrew.com.