Privacy Policy

Last updated: March 11, 2026

At WhaleMaps, we take your privacy seriously. This policy explains what data we collect, how we use it, and your rights regarding that data. We designed our platform with privacy in mind — we collect only what's necessary to provide you with a great experience.

1. What We Collect

We collect minimal data to operate the service:

Data	Source	Purpose
Email address	Registration / OAuth	Account identification, transactional emails
Name	Google OAuth (if provided)	Account personalization
Usage analytics	Umami (cookie-free)	Understanding how the platform is used
Payment information	Stripe	Subscription billing

What we don't collect: We do not store credit card numbers or payment details — all payment processing is handled securely by Stripe. Our analytics (Umami) are cookie-free and do not collect personally identifiable information (PII). We do not track you across other websites.

2. How We Use Your Data

We use the data we collect for the following purposes:

Account management: Creating and maintaining your account, authenticating your identity
Service delivery: Providing access to WhaleMaps features based on your subscription plan
Transactional emails: Sending welcome emails and essential account-related communications via Resend
Platform improvement: Analyzing anonymous usage patterns to improve the service

We do not sell, rent, or share your personal data with third parties for marketing purposes. We will never send you promotional or marketing emails.

3. Third-Party Services

WhaleMaps integrates with the following third-party services, each with their own privacy policies:

Clerk — Authentication

We use Clerk to manage user authentication, including Google OAuth and email/password sign-in. Clerk processes your email address and name to create and manage your account. Clerk's Privacy Policy →

Stripe — Payments

We use Stripe to process subscription payments. Your payment information (credit card, billing address) is collected and stored directly by Stripe. WhaleMaps never has access to your full card details. Stripe's Privacy Policy →

Umami — Analytics

We use Umami for privacy-friendly website analytics. Umami is cookie-free, does not collect personal data, and does not track users across websites. All data is aggregated and anonymous. Umami's Privacy Policy →

Resend — Transactional Email

We use Resend to send transactional emails (such as welcome emails). Your email address is shared with Resend solely for the purpose of delivering these emails. Resend's Privacy Policy →

4. Cookies

WhaleMaps uses minimal cookies:

Authentication cookies: Clerk uses session cookies to keep you signed in. These are essential for the service to function and cannot be disabled.
Analytics: Umami is completely cookie-free. No tracking cookies are placed on your device for analytics purposes.

We do not use advertising cookies, third-party tracking cookies, or any non-essential cookies.

5. Data Storage & Security

We take the security of your data seriously:

All connections to WhaleMaps are encrypted using TLS/HTTPS
User data is stored securely with appropriate access controls
Payment data is handled entirely by Stripe, which is PCI DSS compliant
Authentication is managed by Clerk with industry-standard security practices
We limit internal access to personal data to only what is necessary for operations

While we implement reasonable security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

Account data (email, name) is retained for as long as your account is active
Usage analytics are aggregated and anonymous — no individual user data is retained
Payment records are retained by Stripe in accordance with their data retention policies and applicable financial regulations

If you wish to have your account and associated data deleted, please contact us via Discord and we will process your request promptly.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data and account
Portability: Request your data in a portable format
Objection: Object to specific processing of your data

To exercise any of these rights, please contact us on Discord. We will respond to your request within a reasonable timeframe.

8. Children's Privacy

WhaleMaps is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information promptly.

If you believe a minor has provided us with personal data, please contact us on Discord.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of WhaleMaps after any changes constitutes your acceptance of the updated policy.

For significant changes, we will make reasonable efforts to notify users through the platform.

10. Contact

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out to us on Discord.