Privacy

Fish counts, catch reports, regulations, conditions and the forecasts built from them are public and need no account. Browsing those pages does not create a profile of you.

When you create an account, we keep:

• Your email address — how you sign in and where alerts go by default.
• A password hash, if you set a password. We store a scrypt hash, never the password itself, so we cannot read it or tell you what it is.
• Optional details you choose to add — a display name, a username, a mobile number for text alerts, and a profile picture.
• Your saved spots and alert settings, so we know what to watch and how to reach you.
• A record of alerts we sent you, so the same one is not sent twice and you can see what you have already read.

A profile picture you upload is resized in your browser to a small square before it is sent, and stored in our own database. It is not passed to any third party.

If you sign in with Google, Google tells us your account identifier, your email address and whether Google has verified it, your name, and your profile picture URL. We store those to create and recognise your account. We never receive your Google password, and we cannot see anything else in your Google account.

You can disconnect Google at any time from your profile, as long as you have another way to sign in.

There are no advertising or analytics cookies on this site, and no third-party tracking scripts. We set two cookies, both first-party and both unreadable by JavaScript:

• wff_session — keeps you signed in. Set when you sign in, cleared when you sign out, and it expires after 30 days.
• wff_oauth — a short-lived cookie that carries a single sign-in across the trip to Google and back. It lasts ten minutes and is deleted as soon as you return.

Only the companies that have to, to do a job you asked for:

• Google — only if you choose to sign in with it.
• Brevo — receives your email address in order to deliver an alert or a password reset.
• SignalWire — receives your mobile number in order to deliver a text alert. Only if you turn text alerts on.
• Stripe — handles payment if you subscribe. See Payments below.

We do not sell your data, share it with advertisers, or use it to build a profile for anyone else. There is no advertising on this site.

The map is drawn with tiles from OpenFreeMap, which — like any resource loaded by your browser — sees your IP address when the map loads. Fish, weather, tide and flow data is fetched by our servers from WDFW, NOAA, USGS and Open-Meteo; those requests come from us, not from you, and carry nothing about you.

Payment is handled by Stripe. We are not a payment processor and deliberately never receive your card details: the card number, expiry, security code and billing address are entered on Stripe's own hosted checkout, on Stripe's systems. They never reach our servers, and there is nowhere in our database they could be stored.

What we do keep, so we know what you are entitled to:

• a Stripe customer identifier and subscription identifier — opaque references that let us ask Stripe about your subscription;
• the plan you are on and its status — active, past due, cancelled or trialing;
• the date your current period ends, so access continues for what you have already paid for.

Stripe receives your email address to attach to the customer record and to send receipts. Stripe is an independent controller of the payment data it holds, and its handling is governed by Stripe's privacy policy. Stripe also uses this data to detect and prevent fraud, which is why a payment can be declined for reasons we are not told.

Stripe tells us when a payment succeeds, fails or a subscription is cancelled, so your access reflects reality. We never see the card behind any of those events.

Deleting your account removes what we hold. It does not, by itself, cancel a live subscription or erase Stripe's own records — Stripe keeps transaction history as long as financial regulations require. Cancel in Billing first, then delete.

Your account and its saved spots stay until you delete them. Alert history is kept so the same alert is not repeated. Sign-in codes and password-reset links are single-use and expire within minutes.

Go to your profile and use Delete account in the Danger zone. This permanently removes your account, your saved spots, your alert history, your profile picture and any connected sign-in — immediately, and it cannot be undone.

If you cannot sign in and want your data deleted, email us from the address on the account and we will do it for you.

Cancelling a paid subscription is separate: cancel it in Billing first, so you are not charged again, and then delete the account.

This site is not intended for children under 13, and we do not knowingly collect their information.

If this policy changes in a way that affects you, the date at the top changes and the previous behaviour does not silently continue. Questions about your data, or a request to delete it, can be sent to b.monticello23@gmail.com.