Account information. When you register, we collect your email address, a username, and a password (stored as a secure hash — we never store your password in plain text).

Profile and preference data. Your selected favorite spots, access tier, and related in-app preferences.

Payment and subscription information. If you subscribe to a paid tier, our payment processor, Stripe, handles your payment details directly. We do not collect or store your full card number. We retain limited subscription metadata (such as your subscription status and Stripe customer/subscription identifiers) to manage your account.

Log Session content. If you use the Log Session feature, we collect the photo you upload along with embedded metadata such as the timestamp and GPS location, which we use to verify your submission against real forecast and buoy data.

Survey responses. If you respond to optional surveys (such as "how did you hear about us" or a cancellation-reason survey), we collect your responses.

Automatically collected information. We use a session cookie to keep you logged in. This cookie is strictly functional — we do not currently use third-party advertising or analytics cookies. Our servers may also log standard technical information (such as IP address and request timestamps) for security and operational purposes.

We use the information above to:

• Create and maintain your account, and personalize your experience (e.g., your favorite spots);
• Process and manage your subscription, via Stripe;
• Verify Log Session submissions against forecast and buoy data, and administer the associated token/rewards system;
• Send you transactional emails (such as password reset and email verification messages), via our email provider, Resend;
• Respond to your support requests;
• Understand aggregate trends (e.g., survey responses) to improve the Service.

We share information with the following third-party providers, solely to operate the Service:

• Stripe, Inc. — payment processing and subscription management.
• Resend — delivery of transactional emails (password reset, email verification).

These providers act as our service providers and are contractually restricted from using your information for their own purposes. We do not sell your personal information to anyone.

The Service also retrieves publicly available forecast and buoy data from third-party sources (NOAA, Open-Meteo, PacIOOS, Copernicus Marine Service). These are data sources for our forecasts, not third parties we share your personal information with.

We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, tax, or fraud-prevention purposes. Log Session photos and associated metadata are retained as needed to operate the verification and rewards system, and are removed upon account deletion or upon request.

• You can review and update your account information at any time by logging in.
• You can cancel your subscription at any time from your account settings.
• You can request deletion of your account and associated data by contacting us at hello@cascadiaapps.com.
• Depending on your state of residence, you may have additional rights regarding your personal information (such as the right to access, correct, or delete it). Contact us to make a request.

The Service is not intended for use by anyone under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete it.

We use reasonable technical and organizational measures to protect your information, including password hashing and secure token-based authentication for account recovery. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (such as an on-site notice or email). Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Questions about this Privacy Policy, or requests regarding your personal information? Contact us at hello@cascadiaapps.com.