Privacy policy

The short version

eFoil Atlas is a directory. You don’t need an account to use it, we don’t run advertising, we don’t sell or rent personal data, and we use analytics that don’t set cookies or track you across other sites. The only personal information we hold about you is what you choose to send us through the contact form.

What we collect and why

• Server logs. Our host, Vercel, records the IP address, browser type and pages requested for every visit, as any web server does. We use these only to keep the site secure and working. Vercel retains them for a short period under its own policy.
• Aggregate analytics. We use Vercel Web Analytics to see which pages, regions and spots are useful. It counts page views by country, device type and referring site without cookies, without identifying you, and without following you to other websites.
• Contact form. When you submit a spot, an operator listing or a question, we receive the name, email address and message you enter, plus your IP address (used only to block spam). The submission is delivered to our inbox as an email through Resend and kept as long as we need it to respond and to verify the listing.
• The map.Map tiles are served by Mapbox, which receives your IP address and the map requests your browser makes, under the Mapbox privacy policy. To centre the map near you we ask a geolocation service (ipapi.co) for the approximate region of your IP address; nothing else is sent. If you tap “Use my location”, your browser asks your permission first and the position is used only on your device to move the map — it is never sent to us.
• Weather.Conditions shown on spot pages are fetched by our servers from Open-Meteo using the spot’s coordinates. No information about you is involved.

Legal basis

Where the GDPR or UK GDPR applies, we rely on our legitimate interest in running, securing and improving the site for server logs and aggregate analytics, and on your request (and, where relevant, your consent) when you contact us or submit a listing.

Who we share data with

Only the service providers that make the site run: Vercel (hosting and analytics), Supabase (our database — which holds directory content, not visitor data), Resend (email delivery for the contact form) and Mapbox (maps). Each processes data on our behalf under its own terms, and some may process it outside your country under standard contractual safeguards. We do not share personal data with anyone for marketing.

Your rights

You can ask us to show you, correct or delete any personal information we hold about you, or object to how we use it. Send the request through the contact page and we’ll respond within 30 days. If you are in the EU or UK and are unhappy with our answer, you can complain to your local data protection authority.

Children

The site is not directed at children under 16 and we do not knowingly collect information from them.

Changes

If we change how we handle data — for example if we add accounts or a newsletter — we will update this page and the effective date above.