1. Who we are
Marina BMP (“we”, “us”) provides marina berth management software, operated from Albania. For the personal data described below we act as the data controller. Contact for all privacy questions and requests: marinaberthmanagerpro@gmail.com.
2. What we collect — and what we do not
If you use Marina BMP locally (free, no account)
We collect nothing. The application runs in your browser, your marina data is stored in your browser’s local storage, and none of it is transmitted to us.
If you create an account
| Data | Why | Where it is held |
|---|---|---|
| Email address | To create and identify your account, match it to your subscription, and send essential service messages | Our cloud database (EU) |
| First and last name, marina name | To personalise the account and reports | Our cloud database (EU) |
| Account dates and plan | When you joined, when your 30-day trial started and ends, and whether you subscribe — so we know what you’re entitled to | Our cloud database (EU) |
| Email preference | Whether you agreed to occasional product emails, and when | Our cloud database (EU) |
| Consent records | When you accepted the Terms (and which version) and confirmed you are 18 or over | Our cloud database (EU) |
| Password | Authentication. Stored only as a salted hash — never in readable form | Our cloud database (EU) |
| Your marina data (berths, vessels, customers, bookings, notes) | Premium only: so it is available on your other devices | Your account (EU) and your device |
| Payment details | To take the subscription payment | Held by Polar, our payment provider. Card details never reach Marina BMP. |
We do not sell your data, we do not use it for advertising, and we do not profile you.
3. Data about your own customers
When you record berth holders, vessels and contact details in Marina BMP, you are the controller of that information and we process it on your behalf. You decide what to enter, how long to keep it, and when to delete it. Marina BMP gives you export and deletion tools so you can meet your own obligations to those people. Please make sure you have a lawful basis for recording their details.
3a. Emails
We send essential emails about your account (sign-up confirmation, password reset). Product emails are opt-in: only if you tick the box when you sign up, or switch it on in Settings. They come at most about every two months, never during your trial, and never while you subscribe. Every one has a one-click unsubscribe link, and you can switch them off in Settings at any time.
5. Who helps us provide the service
We use a small number of service providers. Each receives only what it needs:
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Accounts, sign-in and cloud sync | Your account details and, with Premium or the trial, your cloud marina. Stored in the EU (Frankfurt), encrypted in transit and at rest. |
| Vercel | Hosting the website and app | Technical request data such as IP address, as every web host does. |
| Polar | Payments, as merchant of record | Your email, name and payment details when you subscribe. Card details never reach Marina BMP. |
| Open-Meteo | Weather on the dashboard — only if you turn it on | The marina location you enter, and your IP address. |
Fonts and software libraries are served from our own website, so simply visiting Marina BMP sends nothing to other companies.
6. How long we keep it
- Account data: while your account exists. When you delete your account (Settings → Danger Zone) your login, profile and everything stored in your account are removed immediately; database backups age out within 30 days.
- Cloud marina data: until you delete it or delete your account.
- Local data and daily safety copies: on your device, entirely under your control — “Delete My Data” in Settings erases it immediately.
- Payment records: retained by Polar as required by tax and accounting law. On our side, a deleted account’s subscription record is removed entirely; we keep only the Polar subscription ID, so a late payment notice cannot bring your details back.
7. Your rights under GDPR
You have the right to access, correct, export (portability), restrict, object to, and erase your personal data, and to withdraw consent where processing relies on it.
- Do it yourself, instantly: download your complete marina from Your data at any time; use Delete My Data in Settings to erase everything on the device; and use Delete my account in Settings → Danger Zone to remove your login and everything in your account.
- Or ask us: email marinaberthmanagerpro@gmail.com. We respond within 30 days.
If you believe we have handled your data improperly you may complain to your national data protection authority.
8. Security
Sign-in is handled by Supabase Auth, which stores passwords only as salted bcrypt hashes; sessions use short-lived signed tokens. Access to cloud records is restricted to the owning account by the database itself. Data you keep only on your device is stored in your browser and is as secure as that device. No system is perfect, so please keep your own exported backups.
8a. Age and children’s data
Marina BMP accounts are for adults aged 18 or over. When you create an account we ask for your date of birth to confirm this; the check happens on your device, and we record only that you confirmed you are 18 or over and when — never the date itself. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
8b. Records of your choices
So that we can show what you agreed to, we record when you accepted the Terms and Privacy Policy and which version, when you confirmed you are 18 or over, and whether and when you agreed to product emails. Your cookie and storage choice is recorded on your own device.
9. Changes to this policy
We will update this page when our practices change and revise the date below. Material changes affecting account holders will be notified by email.
Version 5.6 · last updated October 2026.