Privacy notice

Who processes which personal data on Port Context Engine, why, on what legal basis, for how long, and how to use your rights.

Who is responsible

The controller is the operator of Port Context Engine. There is no company entity yet: the individual operating the service is responsible and answers every privacy request at the contact address below. There is no data protection officer; one is not required for a service of this size.

Contact

Email urtzi.alfaro@portcx.com to make a request.

What we process, why, and on what legal basis

Each feature processes only the data it needs. The legal bases are those of Article 6(1) GDPR.

Your account

Data: Email address, password (stored only as an Argon2id hash), plan, sign-up date, optional two-step verification (an encrypted secret and hashed recovery codes), sign-in sessions.
Purpose: Provide the account and keep it secure.
Legal basis: Contract (Art. 6(1)(b)).

API keys and usage

Data: Key prefix, creation and last-use time (the key itself is stored only as a hash), daily call counts.
Purpose: Authenticate API calls and enforce the plan's quota.
Legal basis: Contract (Art. 6(1)(b)).

Watchlists, alert rules and webhooks

Data: Watched vessels, rule filters, delivery targets (an email address, an encrypted Slack link or a webhook URL with an encrypted signing secret), acknowledged alerts.
Purpose: Deliver the alerts you configured.
Legal basis: Contract (Art. 6(1)(b)).

Emails we send

Data: Your email address and the message content (alerts, account messages, the weekly digest).
Purpose: Send the alerts and account messages you need, and the weekly port digest.
Legal basis: Contract (Art. 6(1)(b)); the digest on legitimate interest (Art. 6(1)(f)), with a one-click unsubscribe link in every issue.

Early-access requests

Data: Email address, chosen plan, optional company, role, interests, ports and use case, language, referring page, time of the request and of your consent, a salted one-way hash of your IP address (never the address).
Purpose: Contact you about early access and learn which features matter.
Legal basis: Consent (Art. 6(1)(a)).

Audience measurement

Data: Page path and campaign tags, referring host, browser, operating system, device class, screen-size bucket, language, country from your time zone, a daily-salted visitor hash, a 30-minute session identifier, engaged time; for signed-in users a daily-salted keyed hash of the account number and the plan. No cookies, no IP address stored.
Purpose: Understand which pages are useful.
Legal basis: Legitimate interest (Art. 6(1)(f)).

Security log

Data: Security events (sign-ins, failed attempts, lockouts, key and setting changes) with time, IP address and browser user agent. Email addresses appear only as a keyed pseudonym.
Purpose: Detect and investigate attacks and misuse; prove the integrity of the log.
Legal basis: Legitimate interest in the security of the service and its users (Art. 6(1)(f)).

Web server logs

Data: Requested page, time, status, browser user agent and your network address shortened to its first three blocks (IPv4 /24, IPv6 /48); no cookies or credentials.
Purpose: Operate the service and diagnose faults and abuse.
Legal basis: Legitimate interest (Art. 6(1)(f)).

Audience measurement: what is recorded

We measure how the site is used without cookies. Per page view we record the page path (without query string) and campaign (UTM) tags, the referring site's host name, browser, operating system and device class, a screen-size bucket, language, a country derived from your browser's time zone (never from your IP address), a 30-minute session identifier and the time the page was actively in view. Visitors are counted with a hash of the IP address and user agent under a random salt that is rotated and discarded every day, so no visitor can be followed from one day to the next; for signed-in users the hash also covers a daily-salted keyed hash of the account number and the plan. No cookies, no IP address stored, no tracking across sites. Kept 13 months. Legal basis: legitimate interest in understanding which pages are useful (Art. 6(1)(f)).

You can object at any time with the switch below (your choice is stored in this browser only) or by sending a Global Privacy Control signal, which is always honoured. The older Do Not Track setting is not read: it is deprecated and Global Privacy Control replaces it.

Audience measurement

We count visits to learn which pages are useful, without cookies and without storing anything that identifies you. No IP address is kept; visitors are counted with a one-way hash whose random key is replaced and destroyed every day at midnight UTC. Nothing is shared with third parties or used to follow you on other sites. Per visit we record the pages viewed, time spent on a page, the referring site, campaign tags in the link, browser, operating system, device type, rounded screen size, language and the country derived from your time zone.

The Global Privacy Control signal of your browser is honoured and turns measurement off. The older Do Not Track setting is not read: it is deprecated and Global Privacy Control replaces it.

Allow audience measurement in this browser

Measurement is off for this browser. Your choice is saved in this browser only.

Who receives your data

Our hosting provider, Hetzner Online GmbH (Germany), runs the servers and the encrypted backup storage in its data centres in the European Union, as our processor under a data processing agreement (Art. 28). Emails are sent from our own mail server to your email provider. Nobody else receives personal data: the maritime and weather data sources the service queries receive no information about you, there are no advertising or analytics vendors, and data is never sold. The domain's DNS is served by Cloudflare; DNS lookups come from your internet provider's resolver and carry no account data.

Transfers outside the EU

None. Personal data is stored and processed only in the European Union.

How long we keep it

Data is deleted automatically when its period ends. A daily job enforces the periods below.

Data	Kept for
Account, API keys, watchlists, alert rules, webhooks, preferences	Until you delete the account.
Sign-in sessions	Deleted 30 days after they end.
Security log, including IP addresses and user agents	12 months.
Web server logs (shortened IP addresses)	30 days.
Audience measurement (no IP address; the daily salt is discarded after one day)	13 months.
Early-access requests	Until the paid plans launch, at most 12 months, or until you withdraw consent.
Notification copy of your early-access request, emailed to the operator and kept in the operator mailbox	Not deleted automatically; the operator deletes it when you request erasure.
Deletion record (account number and time only, so a restored backup cannot bring a deleted account back)	130 days (longer than any backup copy lives).

Backups: the account database is backed up nightly, encrypted, to Hetzner object storage in the EU. Daily backups are kept 30 days and weekly copies 4 weeks, then deleted; tamper-proof storage locks add up to 97 days, so a deleted account disappears from every backup copy within 125 days. Any restore re-applies all deletions before the service comes back online.

Your rights

You have these rights under Articles 15 to 22 GDPR. Self-service actions take effect immediately; requests to the contact address are answered within one month.

Access and portability (Art. 15, 20): download everything held about your account as a machine-readable JSON file with “Download my data” on your profile.
Rectification (Art. 16): write to the contact address to have inaccurate data corrected, such as the email address of an account.
Erasure (Art. 17): delete your account and all its data yourself with “Delete account” on your profile. Early-access requests without an account are deleted on request: the stored request is removed and the operator deletes the notification copy from the mailbox.
Restriction (Art. 18): ask us to stop using your data while a request is examined.
Objection (Art. 21): object to processing based on legitimate interest at any time: use the audience-measurement opt-out on this page or Global Privacy Control, and the unsubscribe link in every weekly digest.
Withdrawing consent (Art. 7(3)): withdraw your early-access consent at any time through the contact address; this does not affect earlier processing.
Complaint (Art. 77): you can lodge a complaint with a data protection supervisory authority, in particular the one where you live or work.

Automated decisions

None. No decision with legal or similarly significant effect is made about you by automated means, and no profiling takes place (Art. 22).

Cookies and local storage

Only strictly necessary first-party cookies are set, and only when you use the feature that needs them. There are no analytics, advertising or third-party cookies.

Name	Purpose	Duration
pce_access	Keeps you signed in (a signed session token).	15 minutes, renewed while you use the site.
pce_refresh	Renews the session; sent only to the sign-in endpoints.	30 days, or until you sign out.
NEXT_LOCALE	Remembers the interface language when it differs from your browser's language.	Until you close the browser.

Your browser's local storage keeps a few preferences on your device only, including your audience-measurement choice; they are never sent to us.

pce-theme: Light or dark theme.
pce-timezone: The time zone used to show times.
pce-last-port: The port you looked at last.
pce-upgrade-prompt-at: When an upgrade hint was last shown, so it is not repeated for 7 days.
pce-auth-sync: Tells your other open tabs that you signed in or out.
pce.analytics.optout: Your objection to audience measurement (strictly necessary to honour it).
pce.analytics.consent: Your audience-measurement choice when this deployment asks for consent first.

Changes to this notice

When processing changes, this page is updated before the change takes effect and the date below changes with it.

Last updated 13 October 2026