1. Introduction

Bar Watch ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

This policy complies with the General Data Protection Regulation (GDPR) for European users and the California Consumer Privacy Act (CCPA) for California residents.

2. Information We Collect

2.1 Information You Provide

When you enable push notifications, we collect:

• Push subscription endpoint: A unique URL provided by your browser for sending notifications
• Encryption keys: p256dh and auth keys required for secure notification delivery

2.2 Information Collected Automatically

We may automatically collect:

• IP address: For rate limiting and security purposes
• Browser type and version: For compatibility and debugging
• Pages visited and timestamps: For service improvement

2.3 Browser Storage

We use browser session storage (not cookies) to remember:

• Whether you've dismissed the safety disclaimer
• UI preferences during your session

This data stays in your browser and is not transmitted to our servers.

3. How We Use Your Information

Data Type	Purpose	Legal Basis (GDPR)
Push subscription	Send bar condition alerts you requested	Consent
IP address	Rate limiting, security, abuse prevention	Legitimate interest
Usage data	Service improvement and debugging	Legitimate interest

4. Data Retention

• Push subscriptions: Retained until you unsubscribe or your subscription becomes invalid
• Server logs: Retained for up to 90 days, then automatically deleted
• Session storage: Cleared when you close your browser

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only in these circumstances:

• Service providers: Push notification delivery services (web push protocol)
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger or acquisition (with notice)

6. Third-Party Services

Our service may integrate with:

• Browser Push Services: Google (FCM), Mozilla, Apple for notification delivery
• External APIs: NOAA, Coast Guard, and other government data sources

These services have their own privacy policies that govern their use of data.

7. Your Rights Under GDPR

If you are in the European Economic Area (EEA), you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, disable push notifications in your browser settings or contact us.

8. Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale of personal information (we do not sell data)
• Right to Non-Discrimination: Not receive discriminatory treatment for exercising your rights

To exercise these rights, disable push notifications or contact us. We will respond within 45 days.

9. Data Security

We implement appropriate security measures to protect your data:

• HTTPS encryption for all data transmission
• Secure storage of push notification credentials
• Rate limiting to prevent abuse
• Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in the United States or other countries. By using our Service, you consent to such transfers. For EEA users, we ensure appropriate safeguards are in place.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Significant changes may be communicated via push notification if you're subscribed.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us through the information provided on the main website.

14. Do Not Track

Our Service does not currently respond to "Do Not Track" signals as there is no industry standard for compliance.

See also our Terms of Service for the terms governing your use of Bar Watch.