Privacy Policy

1. What we collect

• Email address — only if you log in; used solely to send your magic login link and identify your account. If you choose "Continue with Google", Google shares only your verified email address with us.
• Saved swims — the date, time, duration, and stations you explicitly save to your account.
• Feedback messages — only what you type into the feedback form.
• Usage analytics — page views and button events via Rybbit (self-hosted, cookieless): a pseudonymous ID, your browser's user agent, and approximate path/referrer information.
• Server logs — standard web-server logs (IP address, requested URL, time) kept for operations and abuse prevention.

2. What we don't do

We don't use passwords, advertising trackers, or third-party ad networks, and we don't sell or share your personal data with anyone. We don't send marketing email.

3. Cookies

One first-party session cookie keeps you logged in for up to 30 days. There are no tracking cookies.

4. Third parties

Weather and current data (NOAA, National Weather Service) is fetched server-side — your browser and personal data are never sent to those services. Charts are rendered with Chart.js loaded from cdn.jsdelivr.net.

5. Changes

This policy may be updated from time to time; the "last updated" date above reflects the current version. Material changes will be noted on this page.