Privacy

What we store

• Your account: the email address you sign in with (we email you a one-time code; there is no password), and the boat name and handle you choose.
• Voyages you upload: the GPX file, compressed, and a smaller replay made from it, with the name, date, distance, duration and top speed.
• App settings backup, if you turn it on in the app.
• Live follow: the boat's latest position and instruments while a share is running, its track since the share started (one position a minute, so followers can see where the boat has been), and a hash of its password if you set one.
• Subscription status from the App Store or Google Play, through RevenueCat. We never see your payment details.
• Reports someone sends about a public page: the text of the report and which page it was about.

Photos are not accepted yet. We use no analytics and no advertising trackers.

Cookies

Only one, and only if you sign in on this website: nc_session. It keeps you signed in and is used for nothing else, so it is strictly necessary and we don't ask for consent. It ends when you close your browser, or after 90 days if you ticked "Keep me signed in". Signing out deletes it. Visitors who don't sign in get no cookies at all.

Who can see it

Voyages are private unless you choose otherwise. A link voyage can be opened only by someone with its secret link; a public voyage is listed in the gallery and on your profile if you made it public. Start and end points within 500 m of where you set off and finished are hidden by default. You can unpublish or delete a voyage at any time.

Live follow is a secret link, optionally with a password, and is never listed or indexed by search engines.

Services we use

Nauti Cloud runs on Render (hosting and database). Sign-in codes are sent by email. Maps on voyage and live pages are drawn in your browser with map images from OpenStreetMap and OpenSeaMap; those services receive the viewer's IP address as part of loading the map. Our hosting keeps short-lived request logs for security.

How long we keep it

Your voyages and settings stay until you delete them or your account. An ended live share and its track are deleted after 7 days, and a live share stops after 14 days at most. Sign-in codes expire after 10 minutes and sign-in sessions after 90 days.

If your subscription ends, uploads and live sharing stop and public pages go private. Your voyages stay here, and you can still download them.

Fair use

Fair use: 2 GB paid storage, 15 MB free, one live session, 14-day live maximum. Local recording on the phone stays unlimited.

Export and delete

Your GPX files can always be downloaded, including after a subscription lapses. Deleting your account (in the app, or by emailing us) removes your profile, every voyage and its files, your live shares and your settings backup straight away.

Contact

Contact cloud@nauti-control.com to export or delete an account, or with any privacy question.