Privacy Policy & GDPR
VesselTracker is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679.
⛵ Maritime Operations — This application is designed for professional maritime use. All data is stored securely and used only for vessel tracking and operational purposes.
1. Data Controller
VesselTracker (operated by Asmahri Abderrahman) is the data controller. Contact: asmahri1@gmail.com.
2. What Data We Collect
- Account information — username, email address (company domain only), and PIN (hashed).
- Vessel data — IMO numbers, vessel names, positions, status, and related operational data (SOF, dossier, port calls).
- Usage data — IP address (anonymised), browser type, device information, and interaction logs.
- Push notifications — device subscription tokens (only if you enable them).
3. How We Use Your Data
- To provide and maintain the vessel tracking service.
- To authenticate users and manage access to the platform.
- To generate SOF, dossier, and other operational documents.
- To send alerts and notifications (if enabled).
- To improve the application and troubleshoot issues.
4. Legal Basis for Processing (GDPR)
- Contractual necessity — to provide the service you requested.
- Legitimate interest — to improve the platform and ensure security.
- Consent — for push notifications and optional features.
5. Data Sharing
We do not sell or rent your personal data. Data is shared only with:
- Supabase — our database provider (data stored in the EU).
- Cloudflare — for hosting and CDN services.
- Google Cloud VM — for data processing and document generation.
- Your data is never shared with third parties for marketing purposes.
6. Data Storage & Security
- All data is stored in secure, EU‑based servers (Supabase).
- Communications are encrypted via HTTPS.
- Passwords (PINs) are hashed and never stored in plain text.
- We retain data only as long as necessary to provide the service or as required by law.
7. Your Rights (GDPR)
You have the right to:
- Access — request a copy of your data.
- Rectify — correct inaccurate information.
- Erasure — request deletion of your account and data.
- Restrict — limit processing in certain cases.
- Portability — receive your data in a machine‑readable format.
- Object — object to processing for legitimate interests.
To exercise these rights, contact us at asmahri1@gmail.com.
8. Data Retention
We retain your data for as long as your account is active. Vessel tracking data is kept for operational purposes and may be archived after 12 months. You can delete your account at any time via the Settings panel, which removes all associated data.
9. Cookies & Tracking
We use minimal cookies for session management (authentication) and preference storage (theme, language). No third‑party tracking cookies are used. You can clear these at any time in your browser settings.
10. Children’s Privacy
VesselTracker is not intended for users under 16 years of age. We do not knowingly collect data from minors.
11. International Transfers
Data may be processed outside the EU (e.g., Cloudflare’s edge network). We ensure appropriate safeguards (Standard Contractual Clauses) are in place.
12. Changes to This Policy
We may update this policy occasionally. The latest version is always available on this page. Significant changes will be notified via the app or email.
13. Contact
If you have any questions about this policy or your data, please contact: