Privacy policy
Version of 21 October 2026.
1. Who processes your data
The data controller is Cédric RICARD, sole trader (entrepreneur individuel, EI), trading as TI REV, SIREN 532 520 285, 2 rue du Brochet, 97229 Les Trois-Îlets, Martinique, France.
For any question or request about your data: privacy@tibord.com. No data protection officer is appointed; none is required for this activity.
This policy applies to the tibord.com website and to the Ti Bord service. The signalk-chiplog plugin, installed on your boat, is separate software: it sends nothing to the service until you have paired your boat.
2. Data processed, purposes and legal bases
The service only processes what it needs to back up, analyse and share your logbook; it does no advertising, no profiling and sells nothing.
| Data | Examples | Source | Purpose | Legal basis |
|---|---|---|---|---|
| Account | Email address, display name, language, units, time zone, passkeys, linked Google or Apple accounts (your identifier with the provider and the email address it gives) | You; Google or Apple if you sign in with them | Create and secure the account, sign you in | Performance of the contract |
| Boat and pairing | Name and type of the boat, photo, pairing token, plugin version, date of the last upload | You, the plugin | Link the plugin to your account, diagnose synchronisation | Performance of the contract |
| Logbook | Passages, GPS tracks, instrument readings, manoeuvres, handwritten notes, alarms, forecasts, stopovers | The plugin | Back up, restore, display, compute statistics, write summaries | Performance of the contract |
| Crew | Names and roles of the people on board, passages they sailed | The plugin, the owner | Display the logbook, statistics per crew member | Performance of the contract (owner); legitimate interest (named crew) |
| Content | Stories, notes on places, photos and videos with their file name and metadata (date and place taken, device), comments | You, your crew and relatives | Enrich and share the logbook | Performance of the contract |
| Sharing and email subscriptions | Circles, invitations, sign-up links, secret links, email subscriptions | You | Show each person what the owner chose, send the emails asked for | Performance of the contract; consent for a relative's emails |
| Billing | Plan, due dates, invoices, the payment provider's customer identifier; never a card number | You, Stripe | Manage the subscription, keep the accounts | Performance of the contract; legal obligation |
| Support | Your messages and our replies | You | Answer your requests | Performance of the contract |
| Reports and moderation | Content reported, reason, decision | Visitors, users | Remove unlawful content | Legal obligation; legitimate interest |
| Technical logs | IP address, date, page requested, errors | Your browser, the plugin | Security, fighting abuse, diagnosis | Legitimate interest |
| Audience measurement | Pages viewed, referrer, without any persistent identifier | Your browser | Improve the site | Legitimate interest |
Sailing tracks reveal where you are and your habits. They are never shown to a third party without your explicit choice (section 3). The service asks for no special category of data within the meaning of Article 9 of the GDPR; avoid writing any in the notes and stories you share.
3. Sharing, position and crew data
Everything is private by default: only the owner and the crew they invite see the logbook.
- You choose who sees what: a circle of named relatives, a revocable secret link, or the public. A public page may be indexed by search engines.
- Publication delay: a passage only appears to third parties after the delay you set; 48 hours by default in public.
- Masked zones: around your home port or your house, the track is cut and the place replaced by a generic name for third parties.
- Photos: a photo belongs to a post, which stays a draft seen by the crew only until it is published. Photos shown on the site are resized copies stripped of all metadata (no date, no device, no position); the original, with its metadata, is only available to the owner and the crew. Where a photo was taken only appears on the map for the crew and relatives, never in a masked zone, and never for third parties (secret link, public page).
- Never in public: alarms, tank and battery levels, unpublished handwritten notes.
- Live tracking (once it exists): never public without your explicit choice.
Crew members named in a logbook do not necessarily have an account. Their name and presence on board are processed to show the logbook to those who have access to it and to compute the boat's statistics. Their name does not appear in public by default. A crew member may ask the owner, or privacy@tibord.com directly, for their name to be removed from shared pages or erased from the service. The owner undertakes to inform their crew of this policy and to publish photos of identifiable people only with their consent.
Minors: an account is for adults only. A minor may appear in the crew or in a photo; the owner only makes them visible to third parties with the consent of their legal guardians.
4. Recipients, processors and transfers outside the EU
Your data is only read by you, the people you share it with, the publisher for support and security, and the processors below, each for its own task only and under a contract that complies with Article 28 of the GDPR.
| Processor | Task | Data concerned | Location |
|---|---|---|---|
| Alwaysdata (France) | Servers, database, backups, sending emails (sign-in links, invitations, sign-up confirmations, summaries, arrival and new post emails) | All | France |
| Scaleway (France) | Storage of photos (originals and resized copies) and videos (their web version only, the original is not kept) | Media files and their metadata | France (Paris) |
| Stripe | Payment, subscriptions, invoices, VAT | Email address, name, country, payment method, amounts | European Union and United States |
| Mapbox (United States) | Map backgrounds: your browser requests the tiles directly from Mapbox | The reader's IP address, browser, the site's address (never the page's), map areas and scales shown; no account, no track, no place name | United States; cached copies in other regions |
OpenSeaMap sea marks. The sea marks (buoys, lights, channels) shown on the interactive maps come from OpenSeaMap, a non-profit collaborative project whose servers are in Germany. Your browser requests them directly: OpenSeaMap then receives your IP address, your browser, the site's address (never the page's) and the map areas and scales shown; no account, no track, no place name. OpenSeaMap is not a processor of Ti Bord: no contract binds it to the publisher, and it processes this connection data under its own rules, as a separate controller.
Signing in with Google or Apple. It is optional: the email link and passkeys always remain available. If you choose it, Google or Apple identifies you under its own terms and privacy policy, as a separate controller; it then learns that you are signing in to Ti Bord. Ti Bord sends it no data from your account. In return, Ti Bord only receives your identifier with that provider, your email address if it is confirmed, and your name the first time. Ti Bord keeps no access token and does not access your contacts, your mail or your files. If you choose to hide your address with Apple, Ti Bord only knows the relay address Apple gives it, and its emails reach you through Apple. You can remove this link at any time from Devices and sessions, and also remove Ti Bord's access in your Google or Apple account settings.
Data received from Google
Ti Bord only uses Google for "Sign in with Google". It calls no other Google API.
-
Data accessed: with the
openid,emailandprofilescopes only, Google gives Ti Bord your Google account identifier, your email address, whether Google has verified it, and your name. Ti Bord neither asks for nor reads your contacts, mail, calendar, files or photos at Google. - Use: to sign you in to Ti Bord and, the first time, to create your account or link it to the account that already has this address. Your name is used as your display name until you choose another. This data is used for nothing else: no advertising, no profiling, no training of artificial intelligence or machine learning models.
- Sharing: this data is not shared with, sold or transferred to anyone. It is stored with the service's host, Alwaysdata, in France, like the rest of the account.
- Protection: the exchange with Google is over HTTPS. Google's identity token is verified on the server (signature, issuer, audience, time, nonce), then discarded: no access token is kept. A sign-in request is good once, for ten minutes at most.
- Retention and deletion: the Google identifier and the address received are kept as long as the link exists. You remove it at any time from Devices and sessions; deleting your account removes it too. They are then erased, backups included, within 30 days. You can also ask for erasure at privacy@tibord.com, and remove Ti Bord's access from your Google account (myaccount.google.com/connections).
Ti Bord's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Transfers outside the European Union: only to Stripe and Mapbox, both certified under the EU–US Data Privacy Framework; these transfers are governed by that framework and by the European Commission's standard contractual clauses. Any other transfer will be stated here before it takes place.
The publisher sells, rents and gives away no data. It only discloses data to an authority on a lawful request.
5. Retention periods
Data is kept as long as the service needs it, then erased, backups included, within the 30 days that follow.
| Data | Period |
|---|---|
| Account | Until it is deleted; a free account with no sign-in and no synchronisation for 3 years is deleted after a reminder by email |
| Linked Google or Apple accounts | Until you remove them or delete the account; a sign-in started but not finished is forgotten after 10 minutes |
| Logbook, free tier | The passages of the last 30 calendar days; an older passage is erased when it leaves that window |
| Logbook, subscriber | During the subscription, then 12 months to view and export, then reduced to the free tier after two reminders |
| Passage deleted on board | 30 days |
| Content (stories, photos, videos, comments) | Until deleted by its author or the owner, or the boat or the account is deleted; a deleted photo's files are erased from storage within 24 hours |
| Accounting records and invoices | 10 years (legal obligation) |
| Support messages | 3 years after the last exchange |
| Reports and moderation decisions | 1 year after the decision |
| Technical logs | 12 months |
| Audience measurement | Aggregated data only, without time limit; raw data 13 months at most |
| Service backups | Rolling 30 days |
6. Cookies and storage on your device
The service only uses cookies needed for it to work: the sign-in session, your display preferences and, for the length of a sign-in with a passkey, Google or Apple, a cookie of a few minutes that ties it to your browser. Audience measurement is done without cookies and without any persistent identifier, under the conditions that exempt it from consent. There are no advertising cookies and no social network buttons that follow you. No consent banner is therefore needed; should that change, your consent would be asked before anything is stored.
Storage on your device. Installed as an app or simply opened in a browser, Ti Bord keeps on your device, in the space the browser sets aside for the site: its scripts and icons; a copy of the pages you have read, to read them again offline; the photos you sent without a connection, until they leave. This data only leaves your device to send those photos to the service, and the publisher has no access to it. Page copies and waiting photos are erased when you sign out or delete your account, a photo as soon as it is sent; the pages of a secret link are never kept. You can also erase everything from your browser's settings (site data). This storage is strictly necessary for the service you ask for and is used for no tracking.
On a shared device, sign out when you are done: otherwise the pages read can still be viewed on that device.
7. Security
- Sign-in by email link, passkey, or Google or Apple account: no password is stored, and the email link always remains available.
- Encryption of exchanges (HTTPS) and of data at rest, backups included.
- A pairing token for each boat, limited to uploading and restoring its logbook, revocable from your account.
- Access control on the server by boat and by role; private media served through temporary links.
- The publisher accesses your private data only for the support you ask for, or for the security of the service, and such access is logged.
- In case of a data breach presenting a risk, notification to the CNIL within 72 hours and information of the people concerned if the risk is high.
8. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time and to set instructions for what happens to your data after your death.
- Self-service: full export of your logbook and content (JSON, GPX, CSV, PDF), editing your profile, deleting content and the account, one-click unsubscribe from each email.
- On request at privacy@tibord.com: answer within one month. Proof of identity may be asked for in case of reasonable doubt.
- Complaint: you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).
A boat's logbook is under its owner's responsibility: a crew member's request that touches that logbook (removing a name, a photo) is handled by informing the owner, without ever changing the logbook kept on board.
9. Changes
Any significant change to this policy is announced by email at least 30 days before it comes into force. The date of the version in force is given at the top of the page.