Privacy Policy

Dashboard Data

When you voluntarily upload a PDF or add data to your dashboard, we store sailing selections, favorites, personal notes, and offer codes you import. This data is created and controlled entirely by you.

IP Addresses

Your IP address is logged when you create a dashboard and when you access it. IP addresses are used solely for rate limiting, abuse prevention, and administrative oversight.

Access Tokens

A randomly generated token serves as your dashboard identifier. This token is stored as a cookie in your browser for convenience, allowing you to return to your dashboard without re-entering your private link.

Usage Data

We collect basic access timestamps, including your dashboard creation date and last access date. We use Google Analytics to collect aggregate, anonymous site usage statistics such as page views, referral sources, and device types. Google Analytics data is not linked to your individual dashboard or personal data.

Blog Comments

If you post a comment on our blog, we store the comment text, your account username (which is displayed publicly alongside your comment), your IP address, the associated timestamps, and the comment's moderation status (for example, pending or approved). This information is stored in our flat-file system, is used to operate and moderate the blog, and may be publicly visible once a comment is approved. You may request removal of your comments at any time by contacting us at [email protected].

We use the information we collect for the following purposes:

• To provide and maintain your personal dashboard
• To prevent abuse and enforce rate limits
• To administer the service (e.g., identifying inactive dashboards for cleanup)
• To operate our blog, publish and moderate comments you submit, and prevent spam or abuse
• To understand aggregate site usage through Google Analytics (e.g., which pages are visited most, general device and browser trends)

We do NOT sell, rent, or share your personal data with third parties.

We do NOT use your data for advertising purposes.

When you interact with our AI assistant, CHIP, we collect and store preferences, facts, and context you share during conversations (such as preferred ships, ports, and cabin types) in a private memory profile. This information is used exclusively to personalize your future interactions with CHIP.

Conversations with CHIP are processed using the Google Gemini API. Your chat data is used solely to generate responses and maintain your personal memory profile; it is not used to train our AI models or shared with third-party advertisers.

• Your data is stored as JSON files on our servers
• We do not store your credit card details on our servers. All financial transactions are securely processed by our third-party payment provider (Stripe).
• For guest users, dashboard access is controlled by private token links — treat your private link like a password. For registered users, access is secured by your account credentials.
• We use reasonable technical measures to protect stored data from unauthorized access

We use the following cookies:

• Dashboard token (mcp_token) — a functional cookie that stores your dashboard access token so you can return to your dashboard seamlessly
• Google Analytics (_ga, _ga_*) — analytics cookies used to collect aggregate, anonymous usage statistics. These cookies are set by Google and are subject to Google's Privacy Policy

We do not use advertising cookies.

• Dashboard data is retained as long as it is actively used
• Inactive dashboards may be cleaned up after extended periods of inactivity
• You may request deletion of your data at any time by contacting us at [email protected]

Access

You can view all your dashboard data at any time via your private link.

Deletion

Contact us at [email protected] to request complete deletion of your dashboard and all associated data.

Portability

Your dashboard data can be exported directly from the dashboard interface (e.g., CSV export).

EU Residents (GDPR)

If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with a supervisory authority.

This service is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected data from a minor, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. We encourage you to review this policy periodically to stay informed about how we protect your data.