Privacy policy

FindYourSails handles two clearly separate kinds of data, and it matters not to confuse them:

• Data you provide yourself — when you create an account, fill in your profile, save regattas, post in Crew Finder or pay for a plan.
• Public sporting data — result lists, entry lists and regatta information already published by organisers, federations and result systems. FindYourSails collects, indexes and displays these with the source shown. They do not come from you and are never described as if you had entered them.

You can create an account with email and password, or sign in with Google or Apple when those options are enabled. We store your email address, one sign-in identity per method (for example Google's account id and the email and name Google provides), creation and sign-in timestamps and session data. Passwords are never stored in clear text.

Sign-in, sessions and password reset are handled by our authentication provider, Supabase. The session is kept in cookies required to keep you signed in. We use no cookies for advertising; statistics cookies are set only if you have accepted them (sections 10–11).

Under My account you can see which sign-in methods are connected and connect or remove a method. The last remaining method cannot be removed, so you cannot lock yourself out.

If you sign in with a provider whose email address is verified and already exists as an account with us, the sign-in is attached to that existing account. We do not create duplicate accounts and never link accounts on the basis of an unverified email address.

The profile contains what you fill in yourself: display name, profile picture, bio, home country, home club in your own words, language and a travel radius. You choose whether the profile is public. A public profile shows only the fields meant to be shown; a private profile is not visible to others.

If you have verified your sailor identity (section 5), there is also a sailor profile with its own visibility settings.

FindYourSails builds a calendar and a results archive from publicly published sources: federation and club calendars, published result and entry lists and similar. From these arise observations about competitors — name, sail number, club, class, placing — exactly as they already appear in the source. The source and the time of collection are always shown.

Such an observation is a record of a competitor in a regatta, not a user account and not a person we are in contact with. We add nothing beyond what the source shows, and we never automatically turn an observation into a verified person.

If you believe an observation is wrong, belongs to someone else or should not be shown, write to the address above and we will review it. We can unlink, correct or remove observations; what remains published at the source is not affected by us.

You can claim observations that are yours. A claim is always reviewed by a person before it is approved; there is no automatic approval. We store the claim, the rows you marked, any comments and the decision.

After verification you can unlink individual observations that turn out to be wrong, and you can revoke the verification entirely. Unlinks are kept so that the same mismatch does not happen again.

A verified sailor identity means you have confirmed that the observations are yours — not that FindYourSails has assessed your skill, experience or trustworthiness.

Saved regattas, what you follow (classes, clubs, regions, sailors), your preferences and the content of My Sailing are stored against your account and shown only to you, unless you have made the profile public.

The calendar subscription is a personal link with a random key. Anyone with the link can read your calendar; treat it accordingly. You can create a new link at any time, and the old one stops working.

Crew Finder is opt-in. You decide whether to have a crew profile, which roles, classes, regions and dates it shows and whether it is visible. Listings you publish are shown to other users.

When you express interest in a listing, the listing's owner sees your message and the card your crew profile shows. Contact details (today, your account's email address) are released only after both parties have accepted the connection and you yourself have chosen to share them — never automatically.

You can block other users and report listings or people. Blocks and reports are stored and used to protect you and others; reports are reviewed by us.

Paid plans (Premium and Pro) are paid through Stripe. Card details are entered at Stripe and are never stored by FindYourSails — we do not see or keep your card number. What we hold is your Stripe customer number, which plan you have, the subscription's status and period dates, and a log of the events Stripe sends us.

Receipts, invoices, payment method and cancellation are handled in Stripe's customer portal via My account. Stripe is the controller of its own processing; see Stripe's privacy policy.

Forum posts and replies are user-generated content shown with your display name. Do not enter information you do not want published. We may remove content that breaks the terms.

We measure as little as possible and without tying the measurement to you:

• Searches: the search term, the number of hits and whether you were signed in — without a user id. This is how we find searches that return nothing.
• Outbound clicks from a regatta to the organiser's entry, website or results: regatta, receiving domain and link type — without a user id.
• Product funnels: counters such as “claim started”, “crew listing created”, “checkout started” — only the event name and time.
• Visitor statistics via Vercel Analytics, which measures page views in aggregate without cookies.
• Google Analytics 4 — only if you have accepted statistics cookies in the cookie banner. Then page views (the page address without query parameters), approximate location derived from the IP address, device and browser are sent to Google, which sets cookies (_ga and _ga_…) to recognise your browser between visits. We never send a user id, e-mail or form content, and Google's advertising features (Google Signals, ad personalisation) are switched off. If you decline, or make no choice, Google Analytics does not load at all.

Necessary cookies: solely for the sign-in session. They need no consent.

Statistics cookies: set by Google Analytics only if you clicked “Allow statistics” in the cookie banner. Google states that the _ga cookie is kept for up to two years. Your choice is stored locally in your browser (key fys-consent) and is not sent to us; you can change it at any time via “Cookie settings” in the footer, which shows the banner again.

Your browser may additionally store your recent searches locally to show them again; that never leaves your device. Advertisements shown on the site are fixed sponsor placements without tracking.

Supabase (database, authentication and file storage; our project is in the EU North region, Stockholm), Vercel (hosting and visitor statistics), Stripe (payments), one.com (sending account emails such as confirmation and password reset) and Google (Google Analytics, only with your consent as described in sections 10–11; Google may process the data on servers outside the EU/EEA, and the transfer takes place under Google's data processing terms and the European Commission's EU–US Data Privacy Framework decision). We do not sell data and do not disclose it to anyone but these providers, unless required by law.

We protect data with, among other things, row-level permissions in the database, encrypted connections, signature verification of payment events and restricted access. No service can promise absolute security; if you find a weakness, write to the address above.

We keep account data for as long as the account exists. If you ask us to delete the account, we remove what you provided yourself; anonymous statistics without a user id are unaffected. Exact retention periods for individual data types are being finalised and will be stated here once decided.

You have the right to know which data we hold about you, to have it corrected or deleted where applicable, to object to certain processing and to receive what you provided yourself. Much of this you can do under My account: change profile and visibility, disconnect sign-in methods, unlink observations and revoke verification, remove crew profile and listings, manage subscription.

For everything else — access, correction, account deletion, objections, questions about a sailor identity or sailing history that is not right — write to info@findyoursails.com. You can also turn to the Swedish Authority for Privacy Protection (IMY) if you believe we process your data wrongly.

We update this policy when the service changes. Last updated: 2026-09-05.