Privacy policy

The data controller is the owner of TidePlanet. Their details are in the legal notice.

For any privacy question, write to us using the contact form or, if you prefer, at [email protected].

To remember your choices, the site keeps a few things in your browser's local storage (localStorage):

• tp.units: your units (meters or feet, degrees, wind speed and time format);
• tp.favorites: your favorite places;
• tp.recent: the last places you visited;
• tp.locale: the language you chose;
• tp.theme: the theme (light, dark or automatic), if you chose one in the settings;
• tp.suntool: the last place or location you used in the sunrise and sunset tool;
• tp.consent: your choice about statistics cookies and when you made it (we ask again after 12 months);
• tp.alerts: the places you asked to get official alerts for (“Notify me”).

This data stays on your device and cannot be used to track you. To show today's data for your places (My places, the star list and the recent places row), your browser asks our server for it by each place's number, just like opening its page; we don't store that list or link it to you. To delete it, clear this site's data in your browser settings.

Location for “Near me”. Only if you press the button and give permission, your browser tells us where you are. We round it to about half a mile (1 km) and send it to our server inside the request (not in the page address, so it does not end up in the logs), only to find the nearest coastal place. We do not store it or write it down anywhere. The legal basis is your consent, which you give by pressing the button and allowing it in your browser (Article 6(1)(a) GDPR).

Location in the sun tool. If you press “Use my location”, the times are calculated in your own browser: your position never leaves your device. It is kept in your browser (tp.suntool) for next time; you can delete it by clearing this site’s data.

You can withdraw location permission at any time in your browser’s site settings (the padlock next to the address).

If you press “Notify me” on a place and give permission, your browser creates a subscription with its notification service (Google’s for Chrome, Mozilla’s for Firefox, Apple’s for Safari or Microsoft’s for Edge) and hands it to us. To receive them, the site installs a small program of its own in your browser (a “service worker”, /sw.js) that only shows the alerts that arrive. Our server keeps only what it needs to send you the alerts: the address of that subscription and its encryption keys, the language, the places you choose, when you turned it on and when we last sent you an alert, and which alerts we have already sent you, so they are not repeated. We do not store your IP address, your browser, your name or your email.

We use it only to send you the official alerts for those places, never advertising, and we do not share it with anyone. Each alert leaves our server encrypted: your browser’s notification service delivers it but cannot read it. That service may be outside the European Union, but it only sees the subscription address, which does not say who you are. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

To turn them off, press “Notify me” again on the place (or “Remove” in “My places”), or remove the notification permission in your browser’s site settings. We keep the subscription until you turn it off or your browser cancels it: as soon as its notification service tells us it is no longer valid we delete it, and also if it keeps failing for 30 days in a row. Our nightly backups, which we keep in Cloudflare’s storage (R2), hold it for 30 more days at most.

As with any website, when you ask for a page your browser sends some technical data: your IP address, your type of browser and device, the page you ask for and the time. Our server receives it, and so does Cloudflare, the company that delivers the site and protects it from attacks.

We use it only to serve the pages, keep the site secure and fix problems, on the basis of legitimate interest (Article 6(1)(f) GDPR). We do not use it to find out who you are or to build profiles.

Our server is rented from a hosting company, and Cloudflare provides its services to us: both process this data only on our behalf and under contract (they are data processors), and may not use it for anything else.

Cloudflare is a U.S. company. Data that passes through it is protected by the safeguards the GDPR requires (the EU-U.S. Data Privacy Framework and standard contractual clauses). You can read its privacy policy.

Our server logs are deleted after 30 days at most, unless they are needed to investigate an attack.

Maps. When you reach a map, your browser requests its images from OpenFreeMap, which therefore receives your IP address, as any website you visit does. We send it nothing else.

Webcams. Beach webcam images are served by Windy.com straight to your browser, which therefore receives your IP address. You can read its privacy policy.

To show you the forecast, official alerts, buoys or webcams, our server requests the data from the services credited on our data sources page. Nothing about you goes in those requests: only the place or area of the page.

To know how many people use TidePlanet and what to improve, we use Google Analytics and Microsoft Clarity. They only load if you press “Accept” in the cookie notice or tick them under “Customize”. If you reject them or do not answer, your browser does not connect to them.

Google Analytics. It counts visits: which pages are viewed, where you came from (a search engine, another site), your approximate country and city, your type of device, browser and language, and how long you spend on the site. To recognize your next visits it stores a random number in two cookies on this domain, _ga and _ga_…, which last 13 months (see the table below).

It is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It runs with Google’s consent mode: it only loads once you accept, and we tell it that you do not give permission for advertising. Google Analytics does not store your IP address: it uses it to work out your approximate country and city and then discards it. We do not turn on Google Signals or any advertising features, and the data of each visit is deleted after 14 months at the most; we only see overall figures. You can read how Google uses data from sites that use its services at policies.google.com.

Microsoft Clarity. It shows us how the pages are used: where people tap or click, how far they scroll and what they skip, with heatmaps and recordings of some visits (a reconstruction of what happens on the page, not a video of your screen). What you type in forms is never recorded, and neither is your list of saved places or the “My places” page.

It stores a random number in two cookies on this domain, _clck (1 year) and _clsk (1 day), and Microsoft may set others on its own domains, such as CLID and MUID (see the table below). Without your permission, Clarity uses no cookies; with it, we pass on only your permission for statistics, not for advertising (its consent mode), and we do not link it to Microsoft advertising.

It is provided by Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Recordings are deleted after 30 days (those we mark to study, after 13 months) and the rest of the data after 13 months at the most. You can read the Microsoft privacy statement.

The legal basis is your consent (Article 6(1)(a) GDPR and Article 22.2 of the Spanish LSSI), which you can withdraw at any time, as easily as you gave it.

Google Ireland and Microsoft Ireland belong to U.S. companies (Google LLC and Microsoft Corporation), so the data may reach the United States. Both are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing adequate protection, and also use standard contractual clauses.

To change your mind, press “Cookies” at the bottom of any page (or the button below) and choose “Reject”, or untick the one you want: we delete its cookies on this domain and the page reloads without it. You can also delete this site's cookies and data in your browser settings.

Change my cookie choice

The only cookies that need your permission are the statistics ones (Google Analytics and Microsoft Clarity) explained above, and they are only used if you accept them. The local storage described above only keeps what you choose and is needed for what you ask for, so it does not require your consent (Article 22.2 of the Spanish LSSI and Article 5(3) of the EU ePrivacy Directive). Your choice about cookies is also kept there (tp.consent), not in a cookie.

Only if Cloudflare needs to check that you are not a robot (for example, during an attack) may it set a technical security cookie of its own (__cf_bm or cf_clearance), which lasts about 30 minutes and cannot be used to track you. It is needed to protect the site, so it does not require your consent.

Through the contact form we receive the type of message, your message, your name and email address if you give them and, if you come from an error report link, the page you were on. To fight spam we also keep your IP address and type of browser.

We use this data only to read your message and reply. It is stored on our own server and in its nightly backups, in Cloudflare’s storage (R2), which are deleted after 30 days. Only the company we rent the server from and Cloudflare store it, on our behalf; we do not share it with anyone else and we will not send you advertising. The legal basis is your consent when you send the form (Article 6(1)(a) GDPR), which you can withdraw at any time; for the IP address and type of browser, our legitimate interest in fighting spam (Article 6(1)(f) GDPR).

If you write to us at [email protected], we receive your email address, the name that comes with it and what you write. That address has no mailbox of its own: Cloudflare’s email service (Email Routing) forwards the message to our inbox without keeping it; it only records the sender, recipient and subject in its delivery log for a month. We use it only to reply to you, we do not share it with anyone else, and the legal basis is your consent when you write to us (Article 6(1)(a) GDPR).

We delete messages once they are no longer needed, and after one year at the latest.

There are no ads today.

If we ever add advertising (for example, Google AdSense), we will first update this page and ask you in the cookie notice whether you accept its cookies. They will not be used without your permission.

You can ask us to see, correct or delete your data, to stop using it, to restrict its use or to hand it over to you. Write to us using the contact form or at [email protected] and we will reply within one month.

If you gave us your consent for something, you can withdraw it at any time; what was done before remains valid. We do not make automated decisions about you or build profiles.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the data protection authority in your country.

If we change how we handle data, we will update this page and the date at the top.