Legal
Last updated September 1, 2026
SeaStatus is run by one person, not an advertising company. This policy describes everything the service actually collects — it is deliberately specific rather than a list of things we might hypothetically do.
Your account. An email address and a password, handled by our authentication provider (Supabase). Passwords are stored only as salted hashes; nobody at SeaStatus can read them.
Your setup. The boats you add (nickname, length range, hull type), the ramp you launch from, and the water you head into. This is the whole point of an account — it's what makes a status specific to you rather than generic.
Your approximate location, if you allow it. Your device's coordinates are used to find ramps near you and estimate drive time. They are sent to our database only as part of a "ramps within this radius" query and are not stored, logged, or linked to your account. Declining the permission prompt costs you nothing except nearby-ramp sorting.
Which waterways get viewed. When a ramp or waterway page is opened we record that that waterway was requested, so our system knows to keep its conditions fresh. This records the waterway, never who viewed it — it is not linked to your account, your IP, or a device identifier.
How you found us. If you create an account from a ramp page or a QR sticker, we store which ramp or page it was, so we can tell which stickers and posts actually reach people. It's recorded once, when the account is created.
Anonymous usage statistics. We use Vercel Web Analytics to count page views and see which pages and referrers bring people in. It is cookieless and does not build a profile of you or follow you across other sites — which is why you don't see a cookie banner here.
No advertising or cross-site tracking. No selling or sharing of personal information with data brokers. No purchase or payment data — SeaStatus is free and has no payment processing. We do not collect precise location in the background, and we never track your location while you're on the water.
Supabase hosts our database and handles authentication. Vercel hosts the website and app and keeps standard server request logs, which include IP addresses.
Live camera providers. Camera feeds are operated by third parties (harbors, resorts, news stations, government agencies). Camera links open on the provider's own site. Where we show a still preview image, your browser fetches that image directly from the provider, so the provider can see your IP address and may set its own cookies. Those providers' privacy policies govern that, not this one.
Weather and marine data sources — NOAA, the National Weather Service, NDBC buoys and Open-Meteo — are queried by our servers on a schedule. Your personal information is never sent to them.
You can delete your account at any time from inside the app: open the Boats tab and choose Delete my account. This is immediate and permanent. It removes your sign-in, your boats, and your saved ramp and water. You do not need to contact us, and there is no waiting period.
Backups taken before deletion may persist for a short retention window at our hosting providers before rolling off. Server request logs are retained by Vercel under their own schedule.
SeaStatus isn't directed at children under 13 and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.
If this policy changes in a way that affects what we collect or who sees it, we'll update the date at the top and note the change here.
Questions about privacy, or a request about your data: support@seastatus.app.