Privacy
What we store, and what we never keep.
The short version: an account, your boats and your routes. Your position is used while you navigate and then forgotten.
A working draft. The substance describes how Bonasea actually handles data, but this text has not yet been through a lawyer and the company registration details are still to be added before launch.
Who is responsible
Bonasea is made by Noosa s. r. o., which is the controller of the data described here.
Write to [email protected] with anything on this page — a question, a correction, or a request to delete your account.
What we collect
Your account. An e-mail address, and the sign-in method you chose: a one-time code, Google or Apple. If you sign in with Google or Apple we receive the address, not the password.
What you set up. Your boat profiles, your saved routes and their waypoints, and the units and comfort tolerance you picked.
Your position, while you navigate. Bonasea sends the boat’s position to the server to work out the conditions at that point. That is the only thing it is used for.
Payment. Handled by the payment provider or the app store you bought through. We see that a plan was paid for, not your card.
What we do not keep
No position history. Your position is used to compute conditions and is not stored on the server afterwards. There is no track of where you have been, wherever you are — inside the European Union or outside it.
No advertising profile. Your data is not sold, rented, or used to build a profile for anyone else.
Where it is stored
App account data is kept on our servers in the European Union, with daily backups. Optional website analytics is processed separately by Google as described below.
Weather, wave and chart data comes from the public sources listed at the bottom of every page. Asking for a forecast does not tell those sources who you are.
Analytics
This public website uses Google Analytics 4 only after you allow analytics. Without consent we do not load the Google tag or send Google Analytics requests, including cookie-free requests. You can reject analytics and use the website and forms normally.
With consent, Google receives viewed page paths, session and browser information, approximate location and events when the mail service accepts a partnership enquiry or launch-notification request. It can process network information such as your IP address. These events count accepted submissions, not unique people, verified leads or delivered emails. We do not attach names, email addresses, organisations or message text. We remove URL query strings and fragments from the page information we send; campaign tracking is not included in this release.
Your analytics choice is stored in this browser for up to 180 days. Analytics cookies (_ga and the cookie for this web stream) also have a maximum lifetime of 180 days, without extending it on each page view. Choose Analytics settings in the footer to change or withdraw consent. Withdrawal stops subsequent measurement, removes these cookies and reloads the page; it does not erase data already collected by Google. If browser storage is blocked, the choice lasts only for the current page.
Google Signals and advertising personalisation are disabled. Google processes Analytics data under its applicable terms and safeguards and may process data outside the European Economic Area. The property currently retains event-level data for two months and user-level data for fourteen months, with user retention renewed on new activity. Aggregated reports can be retained longer. The app account and navigation practices described elsewhere on this page are separate from this website measurement.
Cloudflare website statistics
Cloudflare delivers and protects this website. Its separate Web Analytics measurement uses a browser script to record page views and loading performance. This measurement works independently of Google Analytics and is not changed by the Google choice in the footer. Cloudflare states that it does not track visitors across its customers’ websites.
How long we keep things
Your account and what you put in it stay until you delete them. Delete your account and the boats, routes and history go with it.
Records we have to keep for tax and accounting are kept for as long as the law requires, and no longer.
Your rights
Under the GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, object to how it is processed, or ask for it in a portable form. Write to [email protected] and we will answer within a month.
If you think we have handled your data badly you can complain to your national data protection authority.
Changes
If this policy changes in a way that matters, we will say so in the app and here, rather than quietly editing the page.
Last updated: this page is a draft and carries no date yet.