Privacy Policy

What we collect

When you sign up with Google, we receive your name, email address, and profile photo. That's it from Google's side.

Inside the app, you can choose to share more. Your profile info (display name, home break, skill level, board type), surf journal entries, trip posts, break reviews, photos you upload, messages you send to other surfers, your crew connections, saved breaks, and secret spot locations.

If you use the location feature, your browser shares your coordinates so we can show you nearby breaks. We don't store your location history. It's used in the moment and then gone.

How we use it

Your data powers your experience on The Surf Window. Your profile shows up to other surfers. Your posts appear in the Explore feed. Your reviews show on break pages. Your messages go to the people you message. Your secret spots stay secret, visible only to you or your crew depending on how you set them.

We use your email to communicate with you about your account. We don't send marketing emails unless you opt in.

We use aggregated, anonymous data to understand how people use the app. Things like which breaks get the most views and what times people check conditions. None of this is tied to you personally.

What we don't do

We don't sell your data. Ever. We don't share your personal information with advertisers. We don't track you across other websites or apps. We don't read your messages.

Where your data lives

Your data is stored on Supabase servers with row-level security on every table. Photos are stored in Supabase Storage. The app is hosted on Vercel. Both use industry-standard encryption.

Third-party services

We use these services to run the app. Google OAuth for sign-in. Supabase for database and storage. Mapbox for the globe and maps. Open-Meteo for surf conditions data. Vercel for hosting.

Each of these services has their own privacy policy. We only share the minimum data needed for each service to function.

Your rights

You can view, edit, or delete your profile data anytime in Settings. You can delete your entire account in Settings, which removes your profile, posts, reviews, photos, journal entries, and crew connections. Some data like messages you sent to other users may remain visible to the recipients.

You can email us at privacy@thewindow.surf with any questions about your data.

Cookies

We use essential cookies to keep you signed in. No tracking cookies, no advertising cookies.

Kids

The Surf Window is not intended for anyone under 13. We don't knowingly collect data from children under 13. If you believe a child has created an account, contact us and we'll remove it.

Changes

If we change this policy, we'll update this page and the date at the top. For significant changes, we'll notify you in the app.