Get the app

Language

Privacy policy

Version of November 11, 2026
Translation of the Spanish version, which prevails in case of discrepancy, unless a provision more favourable to the consumer applies.

Data controller

The data controller is the publisher identified in the legal notice. For any question, or to exercise your rights: show the address.

Data processed

  • Account: email address, login identifier (Google or Apple if you use them), language, creation date.
  • Usage: saved boats (dimensions, speeds, polar), passage and voyage requests (places, dates, preferences, written wishes), calculated results, credit balance and movements.
  • Position: the starting point you choose with « Start from my position » (your position at that moment), saved with the crossing.
  • Community: the ratings, comments and places you propose, with your email address, read by us before they are used.
  • Payment: packs purchased, amounts, invoices, country and billing address passed on by Stripe; never your card details, which only Stripe processes.
  • Technical: IP address and server logs, for security and troubleshooting.

The « Locate me » button and navigation mode use your position on your device only; Seadromy does not receive it. With « Start from my position », your position at that moment becomes the departure of the crossing: it is sent to Seadromy and kept with the crossing.

Purposes and legal bases

  • Providing the service and the calculations requested, managing the account and the credits: performance of the contract.
  • Invoicing and keeping the accounts: legal obligation.
  • Securing the service, preventing fraud and abuse: legitimate interest.
  • Improving the places base with the ratings, comments and places you propose: legitimate interest.
  • Sending you service messages (login, results, purchases, credits running low or expired): performance of the contract. No marketing newsletter is sent to you without your consent.

Service providers

  • OVH SAS (France): hosting of the servers.
  • Brevo (Sendinblue SAS, France): sending of the service emails.
  • Google Commerce Limited (Ireland): sells the credit packs bought in the Android app (Google Play), and sends the receipt; we receive the order number and the country of the purchase.
  • Supabase Inc.: account authentication.
  • Stripe Payments Europe Ltd. (Ireland): payments and invoices.
  • Google and Apple: only if you choose to log in with them.
  • Anthropic PBC (United States): reading the wishes you write freely in a voyage request, to turn them into preferences, and writing the summary of a computed crossing from its figures (places, times, weather); your email address is never sent.
  • Mapbox Inc. (United States): display of the base maps; your browser sends it your IP address.
  • jsDelivr: delivery of the map library; your browser sends it your IP address.
  • Google Fonts: fonts loaded by your browser.

Forecasts are obtained from Open-Meteo using geographical positions, without any personal data. Where data are transferred outside the European Economic Area, the transfer relies on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework, or on its standard contractual clauses. Your data are never sold.

Retention periods

  • Account and usage data, departure positions included: as long as the account exists; erased as soon as you delete the account in the app, or within thirty days of a request by email.
  • Ratings, comments and proposed places: as long as they serve the places base; once the account is deleted, without your address or any link to it.
  • Internal identifier of a deleted account and a keyed fingerprint of its address (never the address itself): three years, to refuse sessions opened before the deletion, not to offer the welcome credits twice and to keep a community ban.
  • Backup copies of the database: five weeks at most.
  • Invoices and accounting records: six years, as required by the Spanish Commercial Code.
  • Technical logs: a few weeks, twelve months at most.

Your rights

You can access your data, have it corrected or erased, object to processing or ask for it to be restricted, and receive your data in a readable format: write to the publisher (show the address). You can also lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es) or with the data protection authority of your country. You can delete your account yourself in the app (Menu > Account > « Delete my account »): see Delete your account.

Cookies and local storage

Seadromy uses no advertising cookies, no audience measurement and no third-party trackers. The app keeps your login session and your settings (language, theme, last map view, display choices) in your browser; the website keeps only your choice of language. This storage is strictly necessary for the service and does not require consent.

Security

Communications are encrypted (HTTPS) and access to data is limited to what the service requires.

Legal information