Privacy Policy

1. What we collect

When you create an OnlyBeaches account we store your email, a hashed password, your chosen handle, persona, and any beaches you save, review, or post reels for. We log the rough geo of API requests (city-level) for caching weather and marine queries — never precise location history.

2. What we don't do

• We don't sell your data.
• We don't track you across other sites with third-party pixels.
• We don't store your device location beyond a single session of /explore-beaches.

3. Cookies

We use a single HttpOnly auth cookie for sign-in sessions, plus localStorage for your personalisation (recently-viewed beaches, persona). No advertising cookies.

4. Third-party APIs

Live conditions are fetched from Stormglass and OpenWeatherMap. Hotel and restaurant lookups use Google Places. Reels are stored in Cloudinary. None of these vendors receive your account identifiers.

5. Your rights

Email privacy@onlybeaches.com to access, correct, or delete your data. We process requests within 30 days.

6. Contact

Questions? Email privacy@onlybeaches.com.