Privacy Policy

Last updated July 2, 2026

Plain version: we collect the minimum needed to run the app — your email (if you sign in), the reports you submit, and your location only if you grant it. We don't run ads, don't sell data, and don't use third-party trackers.

What we collect

Account info: if you sign in with Google, we receive your email address and a stable account ID from Google — nothing else from your Google account.
Reports you submit: the category (e.g. jellyfish, rip current), an optional short note, and the beach and time. Reports are tied to your account so we can enforce rate limits and prevent abuse.
Location: only if you grant browser location permission, used to sort beaches by distance and suggest your nearest beach. Never collected without your explicit permission.
Basic usage analytics: aggregate, non-cookie-based page views (Vercel Web Analytics) and server-side counters (e.g. how many people viewed a given beach) — not tied to your identity.

What we don't do

No advertising, and no ad networks or trackers embedded in the app.
No selling or renting your data to third parties.
No cross-app tracking or fingerprinting.

Account deletion

You can delete your account at any time from the account menu in the app. Deleting your account removes your identity and your reports. The anonymous, aggregated daily counts your reports contributed to (e.g. "3 jellyfish reports at Venice Beach on July 2") are kept — they carry no information that identifies you, and preserve the historical signal for future users.

Data storage

Account and report data is stored with Supabase (Postgres) in the United States. Beach conditions data comes from public sources — NOAA, the National Weather Service, Florida Fish and Wildlife Conservation Commission, and Mote Marine Laboratory.

Questions

Contact hello@coasti.app with any privacy question or data deletion request.