REGULATION (EU) 2016/679 (GDPR)ZERO-TRACKING PRIVATE BROWSING

Privacy Policy & Ocean Data Protection

At SurfChecks we respect your privacy. We do not require account sign-ups, we do not harvest personal identifiers, and we never monetize user browsing data, adhering strictly to European GDPR principles.

01 // DATA MINIMIZATION (ART. 5(1)(C))

Direct Access Without Mandatory Registration

Pursuant to Regulation (EU) 2016/679 (GDPR) and the core principle of data minimization established under Art. 5(1)(c), SurfChecks provides unrestricted public access to live beach streams, hydrographic models, and tide forecasts without requiring account registration, names, emails, or phone numbers.

02 // CLIENT PREFERENCES & TIMING-SAFE AUTH

Local Storage and Cryptographic Verification

User interface preferences and favorite surf breaks are stored entirely on your device via window.localStorage. Administrative operational sessions verify the secure surf_atlas_auth cookie utilizing timing-safe constant-time evaluation (safeEqual). Video streaming embeds are routed through youtube-nocookie.com to ensure third-party tracking cookies remain disabled.

03 // DATA SUBJECT RIGHTS & LEGAL CONTACT

Rights Under GDPR Articles 15 to 22

In accordance with GDPR Articles 15 to 22 (rights of access, rectification, erasure, restriction, portability, and objection), users may direct privacy inquiries or data rights requests to privacy@surfchecks.com.