Privacy Notice

Decklocker operates the DeckLocker marine inventory application. Decklocker is the data controller for the personal data described in this notice, which means we decide why and how it is processed.

Personal data we collect

• Account data — name, email address and profile photo received from your Google sign-in, and your account role.
• Content you create — vessels, zones, lockers, boxes, items, notes, documents you upload, saved anchorage positions and, if you enable it, your device location while using the chart.
• Sharing data — email addresses you invite to a vessel and the access level you grant them.
• Technical data — IP address, device and browser information, and basic usage and error logs.
• Support data — messages you send us.

Why we use it and on what basis

• Providing the service (creating your account, storing your inventory, sharing vessels, QR tags, alerts) — performance of our contract with you.
• Security and fraud prevention — our legitimate interest in keeping the service safe.
• Product improvement and troubleshooting — our legitimate interest in improving DeckLocker.
• Customer support — performance of our contract and our legitimate interest in helping users.
• Device location and optional emails — your consent, which you can withdraw at any time.
• Legal and accounting obligations — compliance with law.

Who we share it with

• Service providers — hosting, database, authentication and error monitoring providers who process data on our instructions.
• Paddle, our Merchant of Record, for sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• Map and vessel-traffic providers, when you use the chart features, to render map tiles and nearby traffic.
• Other users you invite — anyone you share a vessel with can see that vessel's content according to the role you assign.
• Professional advisers and authorities — where necessary or required by law.

We do not sell your personal data.

International transfers

Some of our providers operate outside your country. Where data leaves the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

Retention

We keep your account and content for as long as your account is active. After you delete your account, content is deleted or anonymised within 30 days, except where we must retain records (for example invoices) to meet legal or accounting obligations. Logs are kept for a short period for security and debugging.

Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database rules so that each user can only reach the vessels they own or have been given access to.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. If you are in the UK or EEA you can also complain to your supervisory authority. We respond to requests within one month. Contact us via the support link in the app to exercise these rights.

Cookies

DeckLocker uses essential cookies and local storage only — to keep you signed in and to remember preferences such as night mode and your active vessel. We do not use advertising cookies. Paddle may set cookies during checkout as described in its own privacy notice. You can clear or block cookies in your browser, but the app will not stay signed in without them.

Contact

For any privacy question, contact Decklocker through the support link in the app.