1. Who we are
Lineup is an independent, non-commercial project. It is not currently operated through a registered company. You can reach us at hello@lineupspot.com.
2. What data we collect
- Account data: email address, display name, username, and profile photo, collected when you sign up.
- Social handles: Instagram, X/Twitter, TikTok, Facebook, all optional and only stored if you add them.
- Check-in data: which spot you checked in at and the times you checked in and out, used to show who's in the water.
- Location: your device location is requested only at the moment you check in, to verify you're within 1 km of the spot. We do not track or store your location continuously.
- Chat messages: messages you send in a spot's chat are stored and visible to other users checked in at that spot.
- Device preferences: language, units, and auto-checkout duration, saved in your browser's localStorage. These never leave your device.
3. Why we collect it
- To provide the service: show who's surfing, enable check-ins, display forecasts, and run spot chats.
- To keep your session active and your preferences saved.
Legal basis (GDPR Article 6): performance of a contract (providing the service you signed up for) and legitimate interests (maintaining app security and preventing abuse).
4. Who we share data with
We do not sell your data. We use the following sub-processors:
- Supabase Inc. (database, authentication, file storage), with servers in the EU. Supabase Privacy Policy.
- Vercel Inc. (hosting and CDN). Vercel Privacy Policy.
- Google LLC: if you choose "Continue with Google", Google processes your sign-in. Google Privacy Policy.
- Open-Meteo (surf forecast data): no personal data is sent to this service.
Some of these providers are based outside the EEA (for example, the United States). Where that's the case, transfers are made under appropriate safeguards, such as the EU Standard Contractual Clauses or an applicable adequacy framework like the EU-US Data Privacy Framework.
5. How long we keep your data
- Account and profile data: retained while your account is active.
- Check-in history and messages: retained while your account is active.
- On account deletion, whether done yourself in the app (Profile → Settings → Delete account) or by request, your account and everything linked to it (check-ins, messages, reactions, follows, reports) are deleted immediately. A copy may briefly persist in routine backups before being purged in the normal backup rotation. Some records without your personal identifiers, such as moderation or support logs, may be kept for safety and legal-compliance purposes.
6. Cookies and local storage
We use browser localStorage to store your session token and UI preferences (language, units, map style). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
7. Your rights (GDPR)
As a user in the EU/EEA you have the right to:
- Access: request a copy of the data we hold about you.
- Rectification: correct inaccurate data, most of which you can update directly in the app.
- Erasure: delete your account and all associated data yourself, anytime, in the app (Profile → Settings → Delete account), or by asking us to do it.
- Portability: receive a copy of your data in a machine-readable format. This is currently fulfilled manually on request (email us) rather than through an automated export.
- Restriction / Objection: restrict or object to certain processing.
- Lodge a complaint: with Spain's data protection authority, the AEPD.
To exercise any of these rights, email us at hello@lineupspot.com.
8. Children
Lineup is not directed at children under 16. If you believe a child has created an account, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy from time to time. We'll notify you via the app for any material changes. The date at the top of this page shows when it was last updated.
10. Contact
Questions about your privacy? Email hello@lineupspot.com.