TRANSPARENCY
Your data.
Your choices.
WindFish privacy notice for Android and the Web. Updated 1 November 2026.
In WindFish, online weather and maps are enabled by default in the app: selected-spot and visible-area coordinates are sent to the relevant providers, along with normal connection metadata. GPS permission is not requested automatically. Shop discovery retains separate permissions.
The website you are reading
This site presents WindFish and its public atlas. Browsing does not require an account. The ratings module offers optional accounts and processes the information described below. No advertising, marketing pixels or tracking cookies are included.
Images, scripts, styles and the APK are served by the same hosting service. Showcase links are opened on demand. The Web app contacts weather and map providers to deliver enabled features. Hosting may keep technical logs, including IP addresses; its practices depend on its configuration and notice.
Copy link writes to the clipboard after your click where supported. It does not read existing clipboard content. The web app language preference is saved locally in this browser.
What the app keeps locally
Private places, sessions, trips, notes, contacts and saved publications are kept in local app storage. They are not automatically published or synchronised to a WindFish account. Optional reviews and booking accounts use separate storage from these local records.
Clearing app data or uninstalling can delete records. Export a JSON backup and keep it safely. A backup can contain precise coordinates and notes; it is not an end-to-end encrypted archive.
Technical diagnostics are voluntary. The summary excludes logbook entries and place coordinates; it may include Android version, device model, WebView provider and the last technical event. It is not a complete crash log.
What may be sent online
Forecast requests transmit the selected point to the weather provider after data is enabled. Weather layers send a grid covering the viewed area to Open-Meteo; tiles reveal the area to OpenStreetMap, NASA GIBS or RainViewer depending on the enabled layer. These services also receive connection metadata such as the IP address.
Supplier lookup has separate consent. The Overpass request uses a rounded centre and radius; this is not anonymisation. Distance calculations using your precise position happen locally.
Location is a foreground request and depends on Android permissions. The supplied code does not request continuous background location. Exports, external directions and Google/Facebook searches then fall under the terms of the service you select.
A supplier HTTPS feed or external weather relay needs separate configuration and consent. They are not connected by default. Manually added announcements remain private records.
Sources & attribution
The following links document services used or referenced. They do not indicate a commercial affiliation.
Weather forecasts through the API; source named in the app.
Available wave forecasts and ocean variables.
Free hosted service: non-commercial use and request limits. A free-to-download app is not automatically non-commercial.
Dated MODIS imagery, WMTS catalogue and in-map attribution.
30-minute precipitation estimates; delayed publication, not live local rainfall.
Past radar frames; Tunisian coverage needs checking and availability is not guaranteed.
Simplified outlines for the offline background and coastline mask, not navigation charts.
Map data under the ODbL licence; attribution retained in the app.
The public tile service is not unlimited infrastructure or a bulk offline-download service.
Mapped-shop queries; shared capacity and variable availability.
Keep phone protections enabled when installing manually.
Website notice: 29 October 2026. Provider terms can change; consult their published versions.
Use and interpretation limits
WindFish is a planning companion, not a certified navigation tool. Models do not measure the sea at every location; sea level is not an official harbour tide. Consult warnings and local rules through official channels.
Solunar periods are astronomical estimates. Statistics come from recorded sessions. Supplier posts are dated leads, not a stock guarantee. Inactive functions or connections are identified in the feature guide.
Optional community account
Browsing forecasts and spots does not require an account. Posting a review uses a username, a public display name and a password. Password hashes, recovery-code hashes and expiring session-token hashes are kept by the operator outside the public web directory. No email, contacts or GPS coordinates are requested by this module.
Stars, your public display name, comment and optional self-reported visit date become public only after moderation. Pending/rejected reviews are visible only to you and moderators. The named spot you rate necessarily identifies that public location; never include private coordinates or somebody else’s personal details in comments.
You may export reviews, withdraw them or delete your account from the Account tab. This does not delete your local fishing logbook. The recovery code is shown once; keep it private. Sessions last up to 12 hours and remain in session storage, not in fishing backups. Rate-limit keys use keyed address hashes with time-limited buckets (up to 24 hours); they are removed on later requests after expiry. Moderation audit records are bounded to 90 days and 10,000 events. Hosting logs and operator backups have separate policies to be configured by the publisher.
One account is not proof of one person or of a real visit. A negative compliant review is eligible for publication. All ratings are WindFish community opinions and are not submitted to Google Play.
Web app and startup update checks
WindFish Web stores your logbook, preferences and private points in this browser. Clearing site data can erase these local records: export a backup first. They are not automatically synchronized with Android or the review account. Weather and map services receive the selected point or viewed area; geolocation is requested after your action. An optional version check fetches public metadata from this site, without sending GPS, logbook, account or device identifiers. Normal hosting access logs are separate. A version check is not an APK download. Optional community accounts and server-side reviews retain their existing data rules.
WindFish accounts and reservations
Booking accounts are separate from review accounts and the private fishing logbook. Registration stores your name, email address and Tunisian phone number on the WindFish server. Passwords are stored as bcrypt hashes. A temporary code verifies your email; no external account is connected automatically.
A reservation request shares your name, phone number, requested bait and quantities, pickup time and note with the selected merchant. It stays pending until the merchant decides. Your account shows your reservations; pending or confirmed requests can be cancelled. No online payment is processed.
Imported listings retain their source and observation time. A third-party listing does not enable WindFish reservations for that shop. Account and booking data are stored privately on the server and are excluded from the local fishing-logbook backup. Your fishing logbook, private spots and fishing notes remain on your device.
Optional remote notifications
Push uses Firebase Cloud Messaging (Google) after you enable it. Firebase processes an installation identifier and a notification token; WindFish keeps the token, selected categories, platform and technical timestamps in private server storage. Announcements can be enabled without an account. Booking updates require the corresponding booking account.
Providers receive connection metadata needed for delivery. Notification content passes through Google. WindFish does not include your fishing logbook, private spots or GPS coordinates. No advertising analytics module is added. Delivery logs record technical status; acceptance by Firebase does not prove that a phone received or read a message.
Change categories or disable push in Settings, and revoke permission in your browser or Android. Signing out removes that account’s booking association. Local reminders keep their separate settings. A connection and a compatible device are required; operating-system restrictions can delay notifications.
Your accounts and deletion
WindFish is published by MAHER BEN GAIED. For privacy questions or data requests, contact ai.esyndic.tn@gmail.com.
Reviews and booking accounts are separate and optional. Weather browsing, the logbook and spots do not require an account. Authors you block in reviews are hidden on this device; their opaque public identifiers and display names are stored locally without automatic synchronization.
To delete a booking account, open Shops → My account → Delete my account, enter your current password and confirm. The profile, credentials, sessions, verification codes and associated notification registrations are removed from active storage. Active bookings are cancelled. Managed listings are removed when a merchant deletes their account.
The other party keeps limited history of their bookings: reference, products, quantities, prices, status and technical dates. The deleted account link, contact details, pickup time, messages and handling notes are removed. This redacted history has no automatic expiry; you may contact support for an additional deletion request. Related audit records are anonymized and remain subject to the 90-day limit.
To delete a reviews account, open Ratings & reviews → My account → Delete my account. The account, its reviews, associated reports and sessions are deleted. Deleting an online account does not erase your private logbook, spots or other local records; you can clear them in the app or your device storage settings.
You can also request deletion without installing the app, including for an unverified, blocked or inaccessible account: request account or data deletion. Never send your password or recovery code. Support verifies that a request comes from the account holder.
Self-service deletion applies to active WindFish storage. Contact support about any copies in hosting logs, backups or email correspondence. The app’s deletion button does not control the hosting provider’s logs or backups.
Online features use HTTPS. Account data supports authentication, bookings and security; installation identifiers and notification tokens support your selected notifications. No online payment, advertising module or advertising analytics is integrated.