Privacy Policy
Last updated: September 2026
Rosa is built to respect your privacy. In short: we keep only what the app needs to work for you, and you can delete it at any time.
What is stored on your device
Your preferences, units, theme, recent spots, and a copy of your favorite spots are saved locally in your browser.
Your account
Saving favorite spots needs a Rosa account, which you create by signing in with Google. We store the name, email address, and profile picture Google shares, your list of favorite spots, and when you last used Rosa. We use them only to keep your favorites in sync across your devices and to count how many people use Rosa. Nothing is sold or shared. The data lives on Cloudflare's servers. Profile › Account › Delete account removes all of it.
Notifications and feedback
If you turn on swell alerts, your browser's push address, your favorite spot ids, and the id of the spot nearest you are stored so we can send the alert. They are deleted when you turn alerts off. If you answer a "was the call right?" question, the spot, date, and your answer are stored to tune the forecast. Contact and report messages are stored so we can read them.
Location
If you allow location access, Rosa uses it only to show the spots nearest you. Your location is not stored and is not sent to us; only the id of the nearest spot is, as above.
Analytics
We count visits and page views with Vercel Web Analytics, which does not use cookies and does not identify you.
We also use Google Analytics to see which spots and screens get used, and roughly where in the world Rosa is being opened. It records the screen you are on, the spot you opened and its region, and settings like your units and theme. It never receives your name, email address, or anything else that identifies you, and Rosa runs no advertising.
If you are in the EU, the EEA or the UK we ask first, and until you say yes Google Analytics runs without cookies and without any identifier - we see a country and a screen, and nothing that follows you between visits. Elsewhere it runs as part of the app. Either way it never receives anything that identifies you, and if you decline, that answer is remembered on this device and applies wherever you travel.
Third-party services
Rosa is built on open data and services from these providers, each with their own privacy practices:
- Open-Meteo · wave and weather forecasts (CC-BY 4.0)
- ECMWF open data · wave spectra and forecasts (CC-BY 4.0)
- NOAA · wave forecasts, sea temperature, and buoy observations
- EOT20 · tide model (Hart-Davis et al., SEANOE, CC-BY 4.0)
- GEBCO · seabed depth data
- OpenFreeMap· map background tiles, © OpenMapTiles
- Vercel · hosting and visit counts
- Cloudflare · account and favorites storage
- Google · sign-in and analytics