This Privacy Policy explains what information Surf Skills ("we") collects when you use surfskills.surf (the "Service"), why we collect it, and the choices you have. We aim to collect as little as we reasonably can.
What we collect and why
We collect information in a few ways:
- Account information. When you sign up, we store your email address and authentication details through our auth and database provider, Supabase. This is required to create and secure your account.
- Usage and analytics (with your consent). We use PostHog to understand how the Service is used — for example, which pages are visited and which features are used — so we can improve it. This may include your IP address, device and browser type, and on-site actions, and a small sample of consented visits (about 15%) is captured as a session recording with keyboard input masked. Analytics runs only if you accept it in the cookie consent banner, and you can withdraw consent at any time via "Cookie settings" in the footer. If you reject, your visit is only counted anonymously — see our Cookies Policy.
- Transactional email. We use Resend to send account-related email such as sign-in links. This requires your email address.
- Logs and security. Our host and CDN, Cloudflare, processes connection data (such as IP addresses) to deliver the site and protect it from abuse.
Cookies
We use cookies and similar technologies for sign-in, preferences, and analytics. See our Cookies Policy for the details and how to manage them.
Who we share your information with
We do not sell your personal information. We share it only with the service providers that run the Service on our behalf (our "sub-processors"), and only as needed to operate it:
- Cloudflare — hosting, content delivery, and security.
- Supabase — authentication and database.
- PostHog — product analytics.
- Resend — transactional email delivery.
We may also disclose information if required to do so by law, or to protect the rights, safety, and property of Surf Skills or others.
Your rights
You can access, correct, export, or delete your personal information. Many of these are available from your account, and you can email us for anything else. Depending on where you live (for example, in the EU/UK or other regions with data-protection laws), you may have additional rights over your data; we'll honour valid requests.
Data retention
We keep your account information for as long as your account is active. When you delete your account, we remove your personal data from our systems within a reasonable period, except where we must retain some records to meet legal or accounting obligations. Backups and provider logs may persist for a short time before being overwritten.
How we secure your data
We rely on reputable providers and standard measures — encryption in transit, access controls, and managed infrastructure — to protect your information. No method of transmission or storage is completely secure, so we can't guarantee absolute security.
Children
The Service is not directed to children under 13, and we don't knowingly collect their data.
International transfers
Our providers may process and store data in countries other than your own. By using the Service you understand that your information may be transferred to and processed in those locations.
Changes and contact
We may update this policy from time to time; we'll update the "last updated" date above when we do. Questions or requests about your data? Email team@surfskills.surf.