Privacy Policy
Maritime & River Ports Intel by Portvolution — portvolution.com
Effective date: September 27, 2026 Version: 2026.09.27_web_v1 Contact: support@portvolution.com
Summary in plain English
- You can browse every port page on this website without an account. We don't use advertising, analytics or tracking cookies.
- If you create an account, we store what's needed to run it: your email address, your login details and the nickname you choose.
- Port reviews and ratings you publish are public — anyone on the internet can read them next to your nickname, and search engines can index them. Your email address and real name are never shown.
- The same Portvolution account also works in the Portvolution mobile app. Data you enter only in the app (voyages, contracts, sea time) is covered by the app's own Privacy Policy, available inside the app.
- You can ask us at any time for a copy of your data or to delete your account: support@portvolution.com.
1. Who is responsible for your data
This website, portvolution.com ("the website", "we", "us"), is operated by Marius Mocanu, an individual based in Romania, acting as the data controller under the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
For any question about this policy or to exercise your rights, contact support@portvolution.com. We answer within 30 days, as required by Article 12 GDPR.
Age requirement: accounts are intended only for people aged 18 or over. We do not knowingly collect personal data from minors; if we learn that an account belongs to a minor, we delete it.
2. What this policy covers
This policy covers the personal data processed when you visit portvolution.com and when you create or use a Portvolution account on the website — including signing in, completing your profile, resetting your password and publishing port reviews.
Portvolution accounts are shared with the Portvolution mobile app: an account created here can be used in the app, and vice versa. Data you enter only in the app — voyage logs, contracts, port calls, sea time, cargo, vessel details, location data used by the app — is described in the app's own Privacy Policy, which you can read inside the app. The website never displays that private data.
3. Data we process
When you only browse the website (no account):
- Technical request data: your IP address, browser type and the pages requested, processed by our hosting and network providers (Vercel and Cloudflare, see Section 6) to deliver the website, protect it against abuse and keep short-lived logs.
- Map tiles: the interactive port map loads map images from OpenStreetMap's tile servers, which receive your IP address and the map area being viewed.
- We do not use analytics, advertising or social-media tracking tools, and we don't build visitor profiles.
When you create or use an account:
- Account data: email address, password (stored only as a secure hash by our authentication provider), and the date the account was created. We also record that the account was created on the website (see Section 5, "New-account review").
- Sign in with Google or Apple (optional): if you choose it, Google or Apple share your email address and basic profile information (such as your name) with us. You can edit or remove the name afterwards.
- Profile data: your nickname (public) and, optionally, your full name (private — never shown to other users; used only to personalise documents you export in the app).
- Security check data: when you sign up, sign in or request a password reset, a Cloudflare Turnstile check runs in your browser to tell people and bots apart. Cloudflare processes technical signals from your browser for this purpose.
- Security logs: sign-in events and related technical data (such as IP address and timestamps) kept by our authentication provider to protect accounts.
When you publish community content:
- Port reviews and ratings ("insights"): the text and ratings you submit, the port they refer to, the date, the vessel type you select and your nickname.
4. Public community content
Port reviews and ratings that pass moderation are published on this website and in the Portvolution app. On the website they are publicly visible to anyone, without an account, and may be indexed by search engines and AI search tools.
Next to each review we show your nickname, the vessel type and the date — never your email address, your full name or your account details. Choose a nickname that doesn't reveal your identity if you prefer to stay anonymous, and don't include personal details (yours or anyone else's) in the text of a review.
5. Moderation and new-account review
To keep port information useful and safe, community content is moderated:
- Automatic checks: obvious spam is filtered automatically, and submitted text is screened by an AI model (Anthropic Claude, see Section 6) that looks only at the content of the submission.
- New-account review: the first three reviews from an account created on the website are reviewed by a person before they are published. This protects the community from automated or abusive accounts.
- Reports: reported content is reviewed by the administrator, who may hide it or restrict the account, as described in the Terms of Use.
6. Service providers (processors)
We don't sell your data and we don't share it with advertisers. We use the following providers, only for the purposes listed:
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase, Inc. | Database, user accounts and authentication | Account data, profile data, community content, security logs | Database hosted in the EU (Ireland, AWS eu-west-1) |
| Vercel, Inc. | Website hosting | Technical request data, short-lived server logs | USA / global edge network |
| Cloudflare, Inc. | Domain, network protection, rate limiting, Turnstile bot check | Technical request data, browser signals for the bot check | USA / global network |
| OpenStreetMap Foundation | Map images on the ports map | IP address, map area viewed | United Kingdom |
| Google (Google Ireland Ltd.) | Optional "Continue with Google" sign-in | Email address, basic profile information | Ireland / USA |
| Apple (Apple Distribution International Ltd.) | Optional "Continue with Apple" sign-in | Email address (or Apple's private relay address), name if shared | Ireland / USA |
| Resend, Inc. | Account emails (confirmation, password reset) | Email address | USA |
| Anthropic, PBC | Automated moderation of submitted reviews | The text of the review | USA |
| Mapbox, Inc. | Satellite header images of ports | Public port coordinates only — no personal data | USA |
| Google (Gemini) | Generating the AI "Botvolution" port guides | No personal data — only public port information | Ireland / USA |
Transfers outside the EU/EEA: some providers process data in the United States or the United Kingdom. Where that happens, transfers rely on the safeguards provided by those providers — the EU–U.S. Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses — and, for the United Kingdom, the European Commission's adequacy decision.
7. Why we process your data (legal bases)
| Processing | Legal basis (GDPR Article 6) |
|---|---|
| Creating and running your account, signing you in, password reset emails | Contract (6(1)(b)) — needed to provide the account you asked for |
| Publishing your reviews and ratings with your nickname | Contract (6(1)(b)) — publishing them is the purpose of the feature |
| Moderation, new-account review, bot checks, rate limiting, security logs | Legitimate interests (6(1)(f)) — protecting the service and its users from spam, abuse and account takeover |
| Delivering the website (hosting, network, map tiles) | Legitimate interests (6(1)(f)) — operating a working, secure website |
| Sign in with Google or Apple | Contract (6(1)(b)) — the sign-in method you chose |
You can object to processing based on legitimate interests (see Section 10).
8. Cookies and similar technologies
The website uses only cookies that are strictly necessary for it to work — no analytics, advertising or tracking cookies, so no cookie consent banner is shown.
- Login session cookies (set by our authentication provider, named
sb-…): keep you signed in and carry a temporary security value during Google/Apple sign-in. They exist only when you sign in and are removed when you log out or the session expires. - Security cookies from Cloudflare (such as
__cf_bm): help detect automated traffic; short-lived. - The Google and Cloudflare Turnstile sign-in widgets run on those companies' own domains and may use their own cookies or storage there, under their own privacy policies.
The website does not store data in your browser's local storage.
9. How long we keep data
- Account and profile data: for as long as your account exists. Inactive accounts may be deleted after a long period of inactivity, following advance notice by email.
- Community content: reviews stay available after you delete your account, because other seafarers rely on them — but your nickname is replaced with a random, non-identifying placeholder and the content is permanently disconnected from your account. From then on it is no longer personal data about you.
- Security logs: up to 12 months.
- Hosting and network logs: kept by Vercel and Cloudflare for short periods, according to their own retention settings.
10. Your rights
Under the GDPR you can, at any time and free of charge:
- access your personal data and receive a copy (Article 15);
- correct inaccurate data (Article 16) — your nickname and name can also be changed in the app;
- delete your account and personal data (Article 17), as described in Section 9;
- restrict processing while a dispute is resolved (Article 18);
- receive your data in a portable format (Article 20);
- object to processing based on legitimate interests (Article 21);
- withdraw consent where processing relies on it (Article 7).
To exercise any of these rights, or to delete your account, email support@portvolution.com from the address linked to your account. You can also delete your account from inside the Portvolution app.
You also have the right to lodge a complaint with a data protection supervisory authority — in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro — or with the authority in the EU country where you live.
11. Security
All traffic to the website is encrypted (HTTPS). Passwords are never stored in readable form, database access is restricted by row-level security rules, and sign-in, sign-up and password reset are protected against automated abuse. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the competent authority where the law requires it.
12. AI-generated content
The "Botvolution Guide" on port pages is generated by an AI model (Google Gemini) from public information about each port. It does not use or reveal any personal data. It may contain mistakes — see the Terms of Use for the full disclaimer.
13. Changes to this policy
We may update this policy when the website or the law changes. The version and effective date at the top always show the current version; significant changes will be announced on the website or by email to account holders.
© 2026 Portvolution. Contact: support@portvolution.com