Privacy Policy

When you create an account and use Fishingstat, we collect:

• Account information: your email address and display name.
• Location: GPS coordinates when you start a fishing session or fetch local weather. Location is optional; you can enter a location name manually.
• Catch photos: photos you choose to attach to catch records. These are uploaded to our secure cloud storage.
• Fishing activity: sessions, catches, gear items, notes, and measurements you log in the app.

We do not collect background location data. We do not collect location when the app is not in use.

• To run the app (session tracking, stats, leaderboards).
• To generate fishing tips: your recent session data is sent to Anthropic’s Claude API. Anthropic does not store this data for training.
• To show you on public leaderboards if you opt in (on by default; change in Settings).
• To turn GPS coordinates into place names using the OpenStreetMap Nominatim service.
• To fetch weather for your fishing location using the Open-Meteo API.

We use these services to run the app. Each processes data only as we instruct:

• Railway: app hosting and database.
• Cloudflare R2: photo and share card storage.
• Anthropic: fishing tips (session context only, not stored).
• OpenStreetMap / Nominatim: reverse geocoding of GPS coordinates.
• Open-Meteo: weather data.
• FastSpring: subscription payments and billing.
• Google Analytics: website usage statistics, only if you accept cookies.

We do not sell your data to any third party.

Some cookies are required for the app to work at all, and are set without asking: the cookie that keeps you signed in, the one that protects forms against cross-site request forgery, and the one that remembers which language you chose. We also store display preferences (theme, onboarding progress) in your browser’s local storage. None of these track you, and none are shared with anyone.

Google Analytics is different. It stores an identifier in your browser that lets Google recognise it, so we ask first. It stays switched off unless you accept, and if you refuse it is never loaded with an identifier at all. You can change your mind at any time using the Cookie settings link at the bottom of any page.

We also count basic activity (sign-ins, sessions logged) in our own database. That happens on our servers, stores no IP address or device identifier, and is tied to your account rather than to your browser, so it needs no cookie and is not affected by the choice above.

Your data is kept until you delete your account. Share card images in cloud storage are removed when you delete your account.

If you delete a catch, its photo is removed from storage too.

You can delete your account and all associated data at any time from Settings → Delete Account in the app. See our account deletion page for step-by-step instructions.

All data is deleted immediately and cannot be recovered.

All data is sent over HTTPS. Passwords are hashed with bcrypt and never stored in plain text. Photos sit in private cloud buckets with scoped access.

Fishingstat is not aimed at children under 13. We do not knowingly collect data from children under 13. If you think we have, contact us and we will delete it.

Questions about this policy or your data: privacy@fishingstat.com