Privacy notice

SwellHunch provides surf forecasts and a private record of your spots and sessions. This notice explains the data used by this beta.

Account and surf records

Email/password accounts use your email address. If you choose Google sign-in, Google provides your email and basic profile information to our authentication provider, Supabase. Google sign-in does not give SwellHunch access to your Gmail or calendar. Email confirmation is currently disabled for beta email/password sign-up.

Your saved records can include private spot names and coordinates, condition rules, session dates and duration, wave ratings, notes, linked historical conditions, personal forecast snapshots, surf plans and alert preferences. These are assigned to your signed-in account and are not offered as public pins or shared with other surfers through the app.

Services that process data

Cloudflare hosts the app and stores its account records. Supabase handles authentication. Google handles Google sign-in when you choose it. These services may process technical information and security logs needed to operate their services.

Open-Meteo receives spot coordinates and forecast or historical calendar dates to retrieve weather and marine data. Your session notes and wave ratings are not sent to Open-Meteo. Map tiles come from OpenStreetMap, and map libraries are delivered by a third-party asset service; those requests can reveal technical information such as your IP address and the map area being viewed.

The personal forecast beta compares your recorded numerical conditions and ratings. It does not send your records to an external AI model.

Notifications and calendars

If you enable device notifications, the app stores that browser's push subscription and uses its push service to deliver a generic update. Private spot names and session notes are not included in notification payloads. Each device has its own notification permission.

SwellHunch does not currently read your calendar. Opening a Google Calendar draft sends the selected event's spot name, time and duration to Google. Downloaded event files contain that event information and can be imported into the calendar you choose.

Browser storage and retention

The browser stores sign-in sessions and an account-specific recovery cache so the app can maintain your session and recover unsaved changes. Saved spots, sessions and notes remain until you remove them or clear your saved SwellHunch data. Removed spots can be retained in the app’s undo list until your saved data is cleared. Alert inbox records are cleaned after 30 days by the background checker; forecast snapshots and plans have bounded retention and are pruned as the app updates them.

Signing out ends the browser's local sign-in session; it does not erase provider account records or all recovery caches. Copies retained during the transition from the earlier private app are separate from the new app's records. Providers may retain service logs or backups under their own retention policies.

Your choices and contact

You can edit or remove spots, sessions and notes, cancel plans, disable alerts, and disable device notifications. The Account panel lets you delete your saved SwellHunch data; this does not delete your Supabase authentication identity or an event already added to an external calendar.

For questions, an authentication-account deletion request, or removal of retained migration copies, contact bertholinom@gmail.com.

Provider information

Cloudflare privacy · Supabase privacy · Google privacy · Open-Meteo terms · OpenStreetMap privacy

← Back to SwellHunch