Introduction

Regatta ("we", "our", "the app") is a sailing tactics application developed by Bellisan ("we", "the company"). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

Regatta Data Security and Privacy Notice

The Regatta team and technical staff collect and process our users' personal data, in accordance with applicable data protection legislation, in order to carry out the following operational processes:

Creating your user account, verifying your identity, and providing secure access,

Recording your race and transaction data (route activity, balance information, transaction history) and reporting it back to you accurately,

Maintaining the security of our website and application and managing user sessions reliably (through strictly necessary technical cookies required solely for the platform to function).

Regatta will never process, use, or transfer this personal data to third parties for any other purpose, unless legally required to do so by a court order or a competent judicial/administrative authority. This personal data will not be retained in our systems for longer than is reasonably necessary to fulfil the operational and legal purposes stated above.

For any questions regarding data privacy, technical information requests, or rights requests, you may contact our data protection officer directly at [email protected].

Regatta - Cookie Policy

Regatta's web infrastructure is designed to uphold the highest standards of cybersecurity, data minimization, and user privacy. Accordingly, our platform does not use, and will never use, any third-party tracking mechanism, advertising cookie, or behavioral analytics tool (such as Google Analytics or Meta Pixel) that tracks user behavior.

When you visit our site, only Strictly Necessary Cookies — generated by the Symfony framework infrastructure to manage secure session state — are temporarily placed in your browser.

PHPSESSID (Session Cookie): Fully anonymous. It only verifies the secure data exchange your browser establishes with our server. It cannot be read by JavaScript (XSS-protected via HttpOnly) and cannot be spoofed by external sites (SameSite=Strict).

Persistence: These cookies leave no permanent trace on your device; they are fully erased from memory the moment you close the browser tab or end your session.

Because of this technical exemption, our platform is not legally required to display a consent banner, and no user's digital footprint is ever transmitted to a third-party server.

As a result, no tracking data is collected and no tracking cookies are placed on your device through our site.

INFORMATION WE COLLECT

Account Information, When you sign in with Google or Apple, we receive your email address, name, and a unique identifier from that provider. We do not receive or store your Google/Apple password.

Location Data. With your permission, Regatta accesses your device's GPS location to show your boat's position on the tactical map and to calculate laylines, VMG, and other sailing metrics. Location data is also used, together with your device's connection to your boat's onboard instruments (via Signal K/NMEA over WiFi), to record race telemetry (speed, heading, wind angle) during a race session you choose to start.

Boat and Race Data. Information you enter about your boat (name, dimensions, ORC certificate number and associated polar performance data), marks you drop, start line positions, and race results (name, finish position, fleet size) is stored on our servers, associated with your account. When you use race features, we record position, speed, heading, wind and race-session data on our servers so you can review and analyse your races.

Telemetry Data. While you have an active race session, the app records periodic snapshots of your boat's speed, heading, wind conditions, and VMG efficiency, along with detected tack/jibe maneuvers, to build your race history and performance summaries.

Depth data: If your boat's instruments provide depth readings, they may be recorded with position and time. This data may be used in anonymised, aggregated form (without your identity or account) to build a shared community depth map that helps other sailors.

Weather Data. We query third-party weather and marine data providers (such as Open-Meteo and StormGlass) using your boat's location to supply wind and current information. Your location is sent to these providers as part of that request; we do not share your identity with them.

ORC Certificate Data. If you enter an ORC reference number, we query the ORC's public certificate database (data.orc.org) to retrieve your boat's official performance data. This data is cached on our servers and associated with your boat profile.

How We Use Your Information

To provide the app's core functionality: tactical calculations, race tracking, and performance history. To personalize calculations using your boat's actual polar data where available.

To maintain your account and allow you to sign in across devices.

To improve the app based on aggregated, non-identifying usage patterns. We do not sell your personal information to third parties. We do not use your data for advertising.

Data Storage and Security

Your data is stored on servers operated by us. We take reasonable technical measures to protect your data, including encrypted connections (HTTPS/WSS) between the app and our servers.

Data Retention and Deletion

You may delete your account at any time from the app's Profile screen. Deleting your account removes your boat profiles, race history, and telemetry data from our active systems. To prevent abuse of free-tier limits, we retain a cryptographic hash of your email address (not the email itself) in a blocklist after deletion.

Children's Privacy

Regatta is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal data, and to object to certain processing. Contact us using the details below to exercise these rights.

Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.

Third-Party Services

Regatta uses the following third-party services, each with its own privacy practices:

Google Sign-In / Apple Sign-In — for authentication.

Open-Meteo, StormGlass — for weather and marine data.

data.orc.org (Offshore Racing Congress) — for boat certificate lookup.

RevenueCat — for subscription management, where applicable.