Privacy Policy

The Red Sea Atlas is an independent community platform for the Egyptian Red Sea, covering diving, fishing, sailing and wind sports. The data controller is Ali Labib, reachable at ali@redseaatlas.com.

When you create an account and use the platform, we may collect:

• Account data, your name, email address, and (optionally) profile photo, cover photo, location, bio, date of birth, nationality, and activity preferences.
• Activity logs, dive logs, kite sessions, and any other logbook entries you choose to record.
• Content, photos, comments, posts, and sighting notes you upload or submit.
• Social data, who you follow and who follows you.
• Fish Identifier photos, when you use the Fish Identifier, the photo you upload is sent to Anthropic for analysis and is kept on our systems along with the resulting identification. We keep these so we can improve the tool and build species pages for fish the Atlas does not yet cover.
• Technical data, IP address (used for rate limiting only, not stored long-term), browser type, and approximate country (from Vercel's anonymised analytics).
• Usage data, while you are signed in we record which pages you view on the platform, linked to your account, so we can understand how members use the Atlas and improve it. This is visible only to the Atlas administrator and is never sold or shared.

We do not collect payment information. The platform is free.

• To run the platform, your profile, logs, and content are the platform. We store them so you and the community can use them.
• Authentication, your email and session tokens are used to keep you signed in securely.
• Safety, IP addresses are checked briefly for rate limiting to prevent automated abuse. They are not logged persistently.
• Analytics, we use Vercel Analytics to understand which pages are visited. This uses no cookies and collects no personally identifiable information.
• Product improvement, we record the pages you view while signed in to learn which content and features members find useful, and to shape what we build next.

We use a small number of infrastructure and processing providers. No data is sold or shared with advertisers.

• Supabase, our database and authentication provider. Your account data and content are stored on Supabase infrastructure hosted in the EU. Supabase complies with GDPR. supabase.com/privacy
• Vercel, our hosting provider. Page requests pass through Vercel's edge network. Vercel Analytics processes only anonymised, aggregated data. vercel.com/legal/privacy-policy
• Anthropic, the Fish Identifier sends the photo you upload to Anthropic's API so the species can be identified. Nothing else about you is sent with it, not your name, your email, or your account. Under Anthropic's commercial terms, material submitted through the API is not used to train their models. anthropic.com/legal/privacy
• iNaturalist, we ask iNaturalist for an openly licensed reference photo of a species using its scientific name. No member data and no member photo is sent. inaturalist.org/pages/privacy

We use one category of cookie: session cookies set by Supabase to keep you signed in. These are strictly necessary and cannot be turned off while using the platform. They are not used for advertising or cross-site tracking.

Vercel Analytics uses no cookies. There are no third-party advertising or tracking cookies on this site.

We keep your data for as long as your account exists. If you delete your account, your profile, posts, photos, logs, comments, and follows are permanently removed from our database and file storage. We keep only a minimal internal record that the account was deleted (for security and abuse-prevention purposes), which is not shared and is not visible to anyone but the administrator.

If you are in the European Economic Area, United Kingdom, or a jurisdiction with equivalent privacy laws, you have the right to:

• Access, request a copy of the personal data we hold about you.
• Rectification, correct inaccurate data. Most profile data can be updated directly from your profile settings.
• Erasure, delete your account and all associated data. You can do this yourself at any time, from your profile settings on the website or under Account Settings in the mobile app, or by contacting us. Deletion is immediate and permanent: it removes your profile, posts, photos, logs, comments, and follows. Step by step instructions are on our account deletion page.
• Portability, request your data in a portable format.
• Objection, object to certain uses of your data.

To exercise any of these rights, email ali@redseaatlas.com. We will respond within 30 days.

The Red Sea Atlas is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we hold data about a child, please contact us immediately.

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify members via the platform.

Questions about this policy or your data: ali@redseaatlas.com. You can also use the contact form.