Privacy policy

Last updated: June 2026

Who is responsible

SIGMAJUNCTION DOO operates Shoalmap and is the data controller for the personal data described here. Contact: hello@shoalmap.com.

What we collect and why

Account. Your email address and a user ID, managed by Google Cloud Identity Platform (sign-in with email/password or Google). Legal basis: performing our contract with you.

Subscription. Your plan, Paddle customer/subscription IDs and subscription status, so we know which features you paid for. Payments are processed by Paddle as Merchant of Record — your card details never reach us. See Paddle's privacy policy.

Usage metering. On the free plan we record which waters you opened reports for on a given day (to enforce the daily limit). Legal basis: contract.

Saved waters. Your favourites list, stored until you remove it or delete the account.

Locations you search. Coordinates you pick (or your device location, only if you allow the browser prompt) are processed to find nearby waters and weather. Search areas are cached server-side briefly by area — not linked to your account history. We do not build a movement profile.

Language preference is stored locally in your browser.

Cookies

We use a single essential session cookie (httpOnly, 7 days) to keep you signed in. No advertising, analytics or cross-site tracking cookies — which is why there is no cookie banner.

Processors and data sources

We share only what each provider needs to do its job:

  • Google Cloud— Identity Platform (authentication) and Vertex AI (fishing reports are generated from a water's name and coordinates — never from your identity).
  • Paddle — checkout, billing, taxes and receipts (Merchant of Record).
  • Open-Meteo — weather for the searched coordinates.
  • OpenStreetMap/Overpass — water lookup for the searched area; Komoot Photon — place-name search; CARTO — map tiles loaded by your browser.

Retention

Account, subscription and favourites data are kept while your account exists. Daily metering entries are only meaningful for the current day. Generated fishing reports are cached per water (not per person). Server logs are kept briefly for security and debugging.

Your rights

You can access, correct, export or erase your data, object to or restrict processing, and complain to your data-protection authority. The fastest way to erase everything is in the app: Account → Delete account — it cancels any subscription, deletes your profile, favourites and metering data, and removes your sign-in record. For anything else, email hello@shoalmap.com.

Children

Shoalmap is not directed at children under 16 and we do not knowingly collect their data.

Changes

If this policy changes materially we will give notice in the app or by email before the change takes effect.