Privacy Policy

Last updated September 1, 2026

Plain version: we collect the minimum needed to run the app — your email (if you sign in), the reports you submit, and your location only if you grant it. We don't run ads, don't sell data, and don't use third-party trackers.

What we collect

Account info: if you sign in with Google, we receive your email address and a stable account ID from Google — nothing else from your Google account.
Reports you submit: the category (e.g. jellyfish, rip current), an optional short note, and the beach and time. Reports are tied to your account so we can enforce rate limits and prevent abuse.
Location: only if you grant browser location permission, used to sort beaches by distance and suggest your nearest beach. Never collected without your explicit permission.
Beach requests: if you ask us to add a beach we don't cover yet, we store the name you typed and the date. If you were signed in when you asked, we also store your account ID, so we can tell you if that beach goes live. You don't need an account to request a beach, and we never store your IP address either way.
Basic usage analytics: aggregate, non-cookie-based page views (Vercel Web Analytics) and server-side counters (e.g. how many people viewed a given beach), kept as daily totals — not tied to your identity.

What we don't do

No advertising, and no ad networks or trackers embedded in the app.
No selling or renting your data to third parties.
No cross-app tracking or fingerprinting.

Account deletion

You can delete your account at any time from the account menu in the app. Deleting your account removes your identity and your reports. The anonymous, aggregated daily counts your reports contributed to (e.g. "3 jellyfish reports at Venice Beach on July 2") are kept — they carry no information that identifies you, and preserve the historical signal for future users. Any beach you requested is treated the same way: the beach name stays on our list so we still know it was asked for, but it stops being linked to you.

Data storage

Account and report data is stored with Supabase (Postgres) in the United States. Beach conditions data comes from public sources — NOAA, the National Weather Service, Florida Fish and Wildlife Conservation Commission, and Mote Marine Laboratory.

Questions

Coasti is operated by Coasti LLC, a Florida limited liability company, which is responsible for the data practices described here. Contact hello@coasti.app with any privacy question or data deletion request.