Trust, Privacy & Security

• Visitors can browse most of the site without an account. Optional sign-in (email/password or Google) is used for things like posting comments, captain reports, and the Bite Club community.
• Administrative tools are restricted to specifically granted admin accounts and are enforced server-side.
• You can sign out at any time from the account menu. Contact us to request deletion of your account or comments you have posted.

• The site is built on the Lovable platform and served over HTTPS. Authentication, database, and storage are provided by managed backend services with row-level access rules.
• Sensitive credentials (API keys, service tokens) are stored as server-side secrets and are never shipped to your browser.

• Account info: the email and display name you provide when you sign up or post a comment.
• Content you submit: comments, photos, captain reports, contact-form messages, and similar submissions.
• Operational data: basic page-view counts and error reports used to keep the site running.
• We do not sell your personal information.

We use a small number of cookies and similar storage for sign-in sessions, saved preferences (like text size), and aggregated analytics such as Google Analytics. You can clear cookies from your browser at any time; some signed-in features will require you to sign back in.

We use trusted vendors to operate parts of the site. Their use of your data is governed by their own privacy policies.

• Lovable (hosting & backend)
• Google (sign-in, Analytics, YouTube embeds)
• Twilio (Captain Call-In phone line)
• Resend (transactional email)
• Stormglass and NDBC (weather and ocean data)

Questions about your data, a privacy request, or a security concern? Email walkwithphil@gmail.com and we'll respond as soon as we reasonably can. You can also reach us through the contact page.