Legal

Privacy.

What we collect, what we do with it, and how to remove it.

Last updated · 2026-06-26

What we collect

We collect your account details (username, email if you provide one) and your activity (sightings, comments, dive logs, site suggestions). Server logs (IP, timestamp, user agent) are retained for 30 days. **None of this is highly protected.** Only your password is treated as private (stored hashed). All other data — including site comments and contribution history — may be disclosed to any official, legal, or governmental entity on lawful request. See the Terms for the full disclosure language.

Cookies

Session cookies (httpOnly JWT) for authentication. A `locale` cookie for language preference. A theme preference key in localStorage. No third-party analytics, no advertising trackers.

Your rights

Export your data via the profile page. Delete your account and contributions via account settings. Email [email protected] for assistance.

Governing law

This privacy notice is governed by the laws of the Arab Republic of Egypt. If you are located in a region that grants additional data-protection rights, we aim to honour those rights as far as applicable law requires.