PRIVACY
Privacy information
What data may be processed when you use Fish Atlas.
Public browsing
Public pages do not require an account. Requests may include technical information such as IP address, browser details, requested URL and timestamps.
Accounts
If you sign in, Fish Atlas stores the email address supplied by the provider or, for a Microsoft managed account without email, a non-routable account placeholder. It also stores your display name, provider account reference, session records and authentication timestamps. One-time codes and magic-link tokens are stored only as hashes and expire automatically.
Exploration trail
Guest exploration keeps recent visits and discovery-book progress in this browser; the trail panel can clear recent visits. When signed in, discovered fish and the last stopping point are stored with your account in our database so you can continue in another browser. An account-specific local cache keeps pending discoveries for retry. The latest 100 distinct fish appear in your account trail. Fish identifiers are included in discovery requests to reduce repeats and check availability.
Explorer controls and optional metrics
Fish Atlas supports exporting or clearing discoveries, voyages, observations, titles and preferences. Clearing also revokes public result-card links; downloaded copies cannot be recalled. Public cards include only selected fish and aggregate counts. Optional Explorer metrics are off by default and store event, date, device category, content version and guest/new/returning account category, without account IDs, email, fish history or page URLs. Raw events expire after 30 days and daily totals remain. A short-lived hash of request IP is used separately for abuse limits. You can withdraw consent at any time.
Infrastructure and analytics
Cloudflare processes request data for delivery, security and privacy-focused aggregate web analytics. Search terms are included in the requested URL when you use catalog search.
External services
Google or Microsoft processes an OAuth sign-in when you choose that provider. Resend delivers account and correction emails. Fish Atlas does not ask visitors to submit sensitive personal information.
