Privacy

Algalert — last updated 16 September 2026

Who is responsible for your data
ContractGrip, represented by Sam van de Crommert
Registered in the Netherlands, Chamber of Commerce (KvK) number 42033182
info@algalertalgarve.eu

Our registered address is held at the Dutch Chamber of Commerce and is available on request. Email is the fastest way to reach us and we answer every privacy request.

The short version

Algalert has no accounts, no names, no email addresses and no photos. A report is one of three buttons. The only things stored about you are a rounded location when you report, and a random identifier your own browser generates. There is no advertising and no tracking across other websites.

What we collect

Your location, only at the moment you report. When you tap to report a beach, your coordinates are sent so the server can check you are actually at that beach. They are rounded to three decimal places — about 100 metres — before being stored. There is no background tracking and no location history.

A random device identifier. A random value generated and kept in your own browser. It stops one person reporting the same beach over and over, and it lets us weigh how often a device agrees with everyone else so false reports carry less weight. It is not linked to a name, email or account, because there are none. Clearing your browser data erases it and there is no way to link the old one to the new one.

A one-way hash of your IP address, when you report. Your IP address is combined with a secret and hashed before storage, so the address itself is never saved and cannot be recovered from what we hold. It exists only to stop one machine submitting reports for many beaches at once. It is deleted together with the report.

Server logs. Our hosting providers keep standard request logs, including IP address and time, for security and abuse prevention.

Why, and on what legal basis

PurposeBasis
Showing the seaweed status of each beachLegitimate interest: this is the service
Checking you are at the beach you reportLegitimate interest: preventing false reports
Limiting how often one device or connection can reportLegitimate interest: preventing abuse
Scoring how often a device agrees with other reportersLegitimate interest: keeping the data honest
Improving the forecast from past reportsLegitimate interest: making the service more accurate

Your browser asks your permission before sharing your location, and you can refuse. Algalert still works without it; your report simply carries less weight because we cannot confirm you were there.

Who else processes it

Nothing is sold, and nothing is shared for advertising.

How long we keep it

DataKept for
Reports: beach, level, rounded location, time24 months
Hashed IP addressDeleted with the report
Weather and sea observations (not personal data)60 days
Server logsAs set by our hosting providers

A report stops affecting what the app shows after 24 hours. It is kept beyond that only to measure and improve how accurate the forecast is.

Your rights

You can ask for access to your data, correction, or deletion, and you can object to processing. Because there are no accounts, we identify your data by the random device identifier — include it with your request, or tell us roughly when and which beach you reported.

Write to info@algalertalgarve.eu. If you are not satisfied with the response you can complain to a supervisory authority: the Autoriteit Persoonsgegevens in the Netherlands, or the CNPD in Portugal.

Children

Algalert is not aimed at children and collects nothing that identifies anyone.

Changes

If this notice changes in a way that matters, we will say so in the app before the change takes effect.

One thing that is not about privacy

Algalert shows an indication based on reports from the public, mentions in local news, and an estimate from wind, swell and the shape of each beach. It is not a measurement, it says nothing about water quality or bathing safety, and conditions can change within hours. Always look for yourself before you get in.

Back to Algalert