Privacy Notice
Last updated 4 November 2026
In short
- You can use the chart, the docs and these pages without an account. Our web server logs keep your internet address and what you asked for during 14 days, for security. The rest of what we keep without an account holds only counts that identify nobody.
- For an account we keep your email address, your keys (as one-way hashes), your plan and how many credits and requests you use each day.
- If you watch vessels or ports, we keep your watch lists and email settings, send the alerts and summaries you choose through our email provider and, if you make one, keep your private calendar link.
- Payments are handled by Paddle. We never see your card details.
- One cookie only: the sign-in session. No advertising, no tracking cookies.
- While you are signed in we record how you use the service, to improve it. Only we see it.
- A station that feeds us is known by its own port number or a one-way code, never by its internet address.
- Our server is in Germany. Write to hello@gangway.app to see, correct or delete what we hold.
1. Who is responsible
Motto Marine International, SARL, SIREN 941 627 929, RCS Dunkerque, 14 Rue de Furnes, 59122 Hondschoote, France, runs Gangway AIS and is the controller of the personal data described here. Contact for privacy questions and requests: hello@gangway.app.
This notice covers the whole of Gangway AIS at gangwayais.com: the live chart, the feed page and its stations, the Data API, the account dashboard and the documentation.
2. What we keep and why
| What | Why | Legal basis |
|---|---|---|
| Email address | Your account, sign-in links, messages about your account, plan and these terms | Contract |
| Name and company | Your name, to greet you and to show in your account. Your company only if you give it (it is optional) and what you said you want to do (watch vessels and ports, the Data API or both), to open the right page first | Contract |
| API keys | Only a one-way hash and the first characters, to recognise a key and let you revoke it. A key's label if you give one | Contract |
| Plan and Paddle references | Your plan, its status and the Paddle customer and subscription numbers so a payment unlocks the right account | Contract |
| Plan payments and refunds | The box you ticked before paying with its wording and time, whether its confirmation email went, each payment, the time your plan was first used and any refund or chargeback, so we can answer a refund request and keep our records | Contract and legitimate interest |
| Usage totals | Credits and requests per key, per day and per month, to count credits, show your dashboard and stop abuse. Our web server logs are described below | Contract |
| How you use the service | While you are signed in we record, under your account, what you do on the site: sign-ins, pages opened, time on the live chart, the vessels and ports you open, search for or follow, the tools you use, the reports you preview or buy, the plan buttons you press and how many API calls you make to each kind of answer. We use it to improve the service and to see where it falls short. Only we can see it, on our own server: we never sell it, never show it to anyone and use no outside analytics tool. It holds no vessel positions, no mouse movements and no recording of your screen | Legitimate interest in improving the service |
| Single reports you buy | Each report you buy or receive with your plan: its kind, the vessel, port or period it covers, its price and any discount, the box you ticked at checkout with its wording and time, the Paddle transaction number and the report itself with its verification code so you can open it again and anyone can check its code | Contract; legal obligation for the payment records |
| Account dates | When the account was made, the last sign-in and when it was closed | Contract; legitimate interest in security |
| Password and two-step check | Your password only as a slow one-way hash, never as typed. If you switch on the two-step check: the secret your authenticator app shares with us and your recovery codes, the codes only as one-way hashes. A count of wrong tries, to lock sign-in for a while after too many | Contract; legitimate interest in security |
| Sign-in links and sessions | Only one-way hashes. A sign-in link works once, for 15 minutes. A session lasts 30 days | Contract; legitimate interest in security |
| Web server logs | Our web server logs each request to this site, with or without an account: your internet address, the time, the page or answer asked for, the result, your browser type and the page that sent you. Keys and tokens in an address are removed. We use these logs to keep the service secure, to find faults and to stop abuse. They are deleted after 14 days | Legitimate interest in security |
| Internet address | Also held in memory for a short time to limit sign-in attempts, requests per minute and passes for the live chart. Not written to our account database | Legitimate interest in security |
| Your Mine, columns and filters | The vessels and ports on your own Mine list and the columns, filters and list you chose on Fleet at a glance and Ports at a glance, so they follow your sign-in | Contract |
| Watch lists | The vessels and ports you watch, your own labels for them, the filters and alerts you choose for each and when you added them, to tell you what happens to them | Contract |
| Alert and summary emails | Your email settings (alerts at once, weekly summary, morning line-up and its hour) and the emails we send you from them. Each email holds vessel and port events, never your other data | Contract |
| Calendar link | If you make one, a private address for a calendar feed of expected arrivals at your watched ports and of your watched vessels. Anyone with the link can read the feed so keep it private; a new link stops the old one at once | Contract |
| Volunteer stations | If your receiver sends us data: the station's own port number or a code that is a one-way hash of its internet address, any name you give it, the date and the version of the station terms you accepted, the station's counts and history and your email address, used only to contact you about your station and its plans. Our receiver does not write the sending address down: it is held in memory only to work out the code and to limit traffic. A station that sends through our web address goes through the web server logs above. You can object at any time: to stop these messages or remove your email address, write to us | Agreement for the station terms; legitimate interest for the email |
| The check on the feed page | "Is my station in?" compares a one-way hash of the internet address you browse from with the stations sending to us. The check itself stores nothing. Its request goes in the web server logs above like any other | Legitimate interest |
| Station owners | If you hold Station Reserve: the rough place you gave for the station (never shown), its station number, the Station Agreement version you accepted and when, your station's daily hours online and vessel counts, the result of our daily check, any kit request and, if you switch it on, the name to show if we list stations. We publish no list of stations today | Contract |
| Emails you send us | To answer you | Legitimate interest; contract where it is about your account |
We can view and check station pages to run and control the service. A station page is made only from the station's own data. It never shows an internet address, an email or where the station is.
We do not sell your data. We do not use it for advertising. We send no newsletters unless you ask for them.
Beyond the web server logs, without an account we keep only counts per day: how often each page and port was opened, which site visitors came from and how many people signed up. These counts hold no address and no identity and cannot be linked to you. What you search for on the chart is not kept unless you are signed in.
3. Cookies and your browser
- One cookie: the sign-in session for your account. It is needed to keep you signed in so it needs no consent. It lasts 30 days, is renewed each day and ends when you sign out.
- Your light or dark choice (
gw-theme) and the chart's settings, such as its view, layers, filters and a route you are drawing, are kept in your own browser. Without an account they never reach us. What you follow in an account is kept with that account. - Our pages load their fonts from Google Fonts. Your browser then asks Google's servers directly. Google then sees your internet address the way any website you open does.
- When you open checkout, the dashboard loads Paddle's checkout script from Paddle.
- To draw the chart your browser asks outside services directly and they see your internet address: map tiles from OpenFreeMap, height data from Amazon's open terrain tiles, 3D code from jsDelivr, traffic density from EMODnet and vessel photographs and particulars from Wikimedia and Wikidata. We send them nothing about you.
4. Who helps us
| Who | What they do | Where |
|---|---|---|
| Paddle.com | Our reseller and merchant of record. Paddle takes payments, charges tax, sends invoices and handles refunds. For the payment Paddle acts as a controller under its own privacy notice (paddle.com/legal/privacy). We give it your account email when you start a purchase. It tells us your plan and its status | United Kingdom and its own providers |
| Hetzner Online | Rents us the server that runs the chart and the API and keeps our databases | Germany |
| Resend | Sends the sign-in emails, the receipts for single reports with the report attached, the confirmations of plans and extra credits and the alert, summary and line-up emails you choose, on our instructions as our processor. It receives your email address and the content of each email | United States |
| Cloudflare | Our domain names and mail forwarding | United States and worldwide |
They act on our instructions, except Paddle for the payment as said above. Where a provider is outside the European Economic Area, the transfer relies on an adequacy decision of the European Commission (the United Kingdom; the EU-US Data Privacy Framework for certified companies) or on the Commission's standard contractual clauses.
5. How long we keep it
- Web server logs: deleted after 14 days.
- How you use the service: deleted after 13 months, or at once when you ask us or when you close your account. The counts without identity are deleted after 13 months too.
- Account, keys, plan and usage totals: while the account is open. When you close it from your dashboard they are removed at once and any plan is cancelled at the end of its period, except what the next line keeps. When you ask us by email, we do the same within one month.
- Watch lists, email settings and calendar link: while the account is open. A vessel or port you remove, or a calendar link you switch off or replace, is deleted from the account at once. They are deleted with the account.
- Your Mine, columns and filters on Fleet at a glance and Ports at a glance: kept with your own sign-in, for you alone. Nobody else on your desk sees your Mine, including the account owner; they see only how many vessels and ports the account uses in total, as a number. A sign-in several people share is one person. If you leave a team or the desk closes, you keep your Mine in your own account, paused until you have a plan again; the Desk stays with the desk. Your Mine is deleted when you remove its rows or when your own account closes.
- Alert and summary emails: we keep no copy of the emails we send. We note only when the last one went so nothing is sent twice. Resend keeps its delivery records as our processor, under our agreement with it.
- Sign-in links: deleted one day after they expire. Sessions: deleted when they expire.
- Internet addresses for limits: in memory, for up to one hour.
- Stations: the code and the figures for as long as the station is part of the network and as long as the history we keep refers to it. What you gave when you started feeding for as long as the station exists, then as proof of acceptance. The email for as long as we keep the station on record, including after it stops sending, unless you ask us to remove it.
- Emails: as long as the matter is open and a reasonable time after.
- Invoices and payment records are kept by Paddle as merchant of record, under its own rules. When an account is closed we keep our own record of each payment and refund, the box ticked before paying and the billing email, with no name and no sign-in, to answer a refund request and for as long as the law asks us to keep accounting records.
6. Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to a use of it or to receive it in a common format. You can also close your account from the dashboard: it is removed at once. Write to hello@gangway.app from your account email. We answer within one month.
If you are not satisfied, you can complain to the French data protection authority, the CNIL (cnil.fr), or to the authority of your own country.
7. Security
We keep passwords, recovery codes, keys, sign-in links and sessions only as one-way hashes so they cannot be read back from our database. Sign-in links work once. The session cookie is sent only over HTTPS and cannot be read by scripts. Access to the server is limited to us.
8. Vessel data
The chart and the API show what vessels broadcast about themselves over AIS: identity, position, course, speed and voyage details. This is about vessels, not about you as a visitor or customer. Our terms forbid using the Service to follow private persons.
9. Changes
We may change this notice. We publish the new version on this page with its date and tell account holders by email about important changes.
10. Contact
Motto Marine International, 14 Rue de Furnes, 59122 Hondschoote, France. hello@gangway.app