Privacy Policy

Last updated 2026-10-07

MyTacklebox collects as little as it can to run a fishing logbook. We do not sell your data, run ads, or use third-party analytics or trackers.

What we store

Account: username, email address, a salted hash of your password (never the password itself), bio, and avatar choice.
What you post: catch photos, species, weight, length, location text, gear, notes, visibility, likes, comments, follows, and direct messages.
Photos: resized and re-encoded on upload, which strips camera metadata such as GPS coordinates.
Payment: whether and when you paid, and Stripe's reference for the payment. Card details are handled only by Stripe.
Security: your IP address is used briefly for rate limiting (login, signup, password reset) and in short-lived server logs.
Google sign-in (optional): if you choose Continue with Google, Google sends us your name, email address, Google account ID, and profile photo link. We keep only the email and account ID, and use them solely to sign you in.
Cookies: one session cookie to keep you signed in. No tracking or advertising cookies.

Who can see it

Public catches, your profile, and your points are visible to anyone. Followers-only catches are visible to your followers; private catches only to you. Direct messages are visible to you and the other angler. The site admin can see account details and reported content in order to run and moderate the service.

Who we share it with

Google handles the sign-in screen if you choose Continue with Google (Google privacy policy). We never see your Google password.
Stripe processes payments (Stripe privacy policy).
Email delivery (for password resets) is sent through a transactional email provider that receives your email address and the message.
We will disclose data if required by law.

Your choices

Export: download everything you have posted from Settings → Export my data.
Delete: delete your account from Settings. Your profile, catches, photos, likes, comments, follows, and messages are erased immediately. A minimal payment record (amount, date, Stripe reference — no personal details) is kept for accounting.
Backups roll over within 14 days, after which deleted data is gone from them too.

Children

MyTacklebox is not intended for children under 13 (16 in the EU/UK).

Contact

Privacy questions or requests: message the admin account.