Cookie Policy

Cookies are small text files stored on your device when you visit a website. However, the regulations do not apply solely to cookies: other tools that store information on or access information from the device, such as pixels, server-side generated identifiers, and device fingerprinting techniques, are also subject to the same rules. For this reason, the following notice describes all tools we use, not only cookies in the strict sense.

The Boat Platform exclusively uses strictly necessary cookies required for the operation of the platform: authentication and user session maintenance, preferences, and security. These cookies do not require consent and cannot be deactivated without compromising the operation of the website.

If you browse the website without signing in, no cookies are installed on your device. The identifiers described below are set only upon signing in to your account or during listing creation, are all first-party, and are all exempt from consent as they are strictly necessary:

We do not employ any other tools that store information on or access information from your device.

• Authentication cookies (set by our authentication provider Supabase, with names starting with sb-): maintain your account login between pages. Duration equals the login session, with automatic renewal as long as you remain connected.
• tbp_pwd_recovery: confirms that you are resetting your password via a genuine recovery link, and prevents the password change form from being used unlawfully. Duration: 15 minutes, after which it expires automatically.
• Browser session storage (keys publish_*): temporarily stores the data of the listing you are completing, so you do not lose it when moving from one step to another. Data remains in your browser and is deleted when the tab is closed.

To understand how the website is used, we collect traffic statistics via PostHog, configured in a way that does not install any cookies and does not load any tracking scripts in your browser. Measurement takes place entirely on our servers and produces minimised events, free of any individual identifiers, which we use solely to derive aggregate statistics.

This measurement is designed to fall within the consent exemption provided for analytics, and for this reason it is not preceded by a cookie banner. The measures that ensure this are as follows:

As a direct consequence of these choices, we are unable to calculate unique visitors, sessions, or bounce rate, and we cannot link a visit to an individual. This is an intentional limitation: we forgo individual data so we do not have to ask you for consent you can do without.

• Your IP address is not transmitted to PostHog. The IP address is received by our servers, as is necessary for any web request, but is not forwarded to the analytics service.
• We do not transmit the browser or device type (user agent), nor any other technical information that would allow your device to be recognised.
• We do not generate any individual identifiers, not even pseudonymous and not even temporary: we do not create codes derived from your IP address, we do not assign session identifiers, and we do not reconstruct the journey of a single visitor across pages.
• All visits to public pages share the same constant identifier, identical for every visitor and not relatable to any individual: it does not serve to distinguish users from one another, and no individual profile is created.
• Regarding geographic origin, we retain solely the country, derived on our servers and transmitted in the form of a two-letter code. We do not track the city or more precise locations.
• For any referring website, we retain only the domain (such as the search engine), never the full URL: terms you typed into an external search and any codes present in the link are removed prior to transmission.
• If you reach the website from one of our promotional links, we record the campaign parameters contained in the link as they are (src, utm_source, utm_medium, utm_campaign, utm_content, utm_term), together with the landing page. We set these when creating the campaign to measure its aggregate performance, and they describe the communication you arrived from, not the person receiving it.

If you use the assisted search bar, the text you type has two distinct destinations:

The filter reduces risk but cannot guarantee the removal of every possible piece of personal data: for example, it does not recognise a full name spelled out or contact details expressed in words. We therefore invite you not to enter personal data in the search bar, which is designed to describe the boat you are looking for.

• The full text is transmitted to the artificial intelligence system provider, which uses it solely to extract search criteria (boat type, location, price, number of berths/seats) and return results. This processing is necessary to provide you with the service you requested.
• A filtered copy of the text is included in usage statistics to understand what users are searching for. The automated filter replaces email addresses, links, and number sequences resembling a telephone number with a generic label.

In the reserved area for registered users, certain events relating to service operation, such as registration completion, listing publication, or payment outcomes, are logged in association with your account for operational, security, and support purposes. These processing activities are described in the Privacy Policy.

We do not use marketing or profiling cookies, nor third-party advertising tools. Some external services to which you are redirected, such as the payment page hosted by Stripe or Google sign-in, may set their own cookies on their respective domains, in accordance with their respective privacy policies.

You can manage or delete cookies via your browser settings. Disabling strictly necessary cookies prevents account login and the proper functioning of the website.

For the statistics described above, an opt-out mechanism via a cookie banner is not available, as they do not use cookies or other tools that access your device and do not produce individual identifiers to disable. In any event, the rights provided under the GDPR and described in the Privacy Policy remain exercisable to the extent applicable.

Should tools requiring consent be introduced, this policy will be updated and consent will be collected in advance, prior to any activation. For any questions, you can write to us at info@theboatplatform.com.