Privacy Policy

1. Overview

Cormorant collects minimal personal information to provide the Service. We do not sell your data. This policy explains what we collect, how we use it, and your rights.

2. Information We Collect

Account information: When you register, we collect your email address and a hashed password. We do not store your password in plaintext.

Profile preferences: Optional settings you configure (such as your home port) are stored in your account profile.

Usage data: We may log general usage activity (pages visited, features used) to improve the Service. This data is not tied to personally identifiable information beyond your account.

3. Cookies and Browser Storage

Cormorant uses session cookies strictly necessary for authentication — specifically to maintain your login state across page loads. These cookies are set by Supabase, our authentication provider, and are not used for advertising or cross-site tracking. We do not use third-party analytics cookies at this time. When analytics are added in the future, this policy will be updated.

4. How We Use Your Information

• To authenticate your account and maintain your session
• To store your preferences (such as home port)
• To send transactional emails (account confirmation, password reset)
• To improve the Service based on aggregate usage patterns
• To contact you about important service changes (using your registered email)

5. Data Sharing

We do not sell your personal information. We share data only with:

• Supabase — our database and authentication provider. Your email and account data are stored in Supabase's infrastructure. Supabase is SOC 2 Type II compliant.
• Payment processor — when paid plans are introduced, billing data will be handled by a third-party payment card processor. We will never store raw payment card information.

6. Data Security

We use industry-standard security practices including encrypted connections (HTTPS), hashed password storage, and row-level security on our database. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and associated data
• Opt out of non-essential communications

To exercise any of these rights, email [email protected].

9. Children's Privacy

Cormorant is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to registered users. The effective date at the top of this page reflects the most recent revision.

11. Contact

Privacy questions or data requests: [email protected]