Privacy Policy
Last updated: October 30, 2026
Overview
Hypertheory LLC, operating Waterscope ("we", "our", or "us") operates a fishing and boating chart that shows your position over seafloor and weather data. This policy explains how we collect, use, store, and protect your information when you use our services.
Information We Collect
Account Information
Email address and password (securely hashed) when you create an account. We do not require additional personal information for registration.
Location
Your device's GPS position while the chart is open, used on your device to place your boat on the map and read the depth under it. Your live position is never sent to us; it leaves your device only inside a mark you choose to save.
Marks
When you save a mark (a fish, a boat, birds or anything else), we store its position, time, depth, what you typed and a random code for the device that saved it. Marks are shared: everyone using the chart can see and delete them, so do not put anything private in a mark.
Communications
Contact form submissions including your email and message. If you correspond with our support or team by email, we retain those communications.
Usage Data
How you interact with our platform including features used and navigation patterns. We also collect first-party pageview analytics: the page visited, referral source, approximate country, and a short-lived pseudonymous identifier derived by hashing connection data. Raw IP addresses are not stored, and no third-party analytics or advertising trackers are used.
How We Use Your Information
- Show the chart, the seafloor, the forecast and the marks
- Send transactional communications about your account and services
- Improve our services based on feedback
- Analyze platform usage to enhance features and user experience
- Comply with legal obligations and enforce our terms
Third-Party Services
We integrate with the following third-party services to provide our platform:
Infrastructure: Supabase (authentication, database), Vercel (hosting)
Map and Weather Data: NOAA (seafloor, tides and currents), Open-Meteo (wind and waves), Scripps CDIP (nearshore waves) and Esri (satellite imagery). Your device asks some of these services for data directly, so they see your device's connection but never your account.
Each service has its own privacy policy. We only share data necessary for the specific service functionality.
Cookies & Local Storage
Essential Cookies: We use secure, HTTP-only cookies for authentication session management. These are required for the platform to function.
Attribution Cookie: One first-party cookie remembers which link first brought you to us and the most recent one (the platform, campaign and landing page, never an identifier or anything about you) for 90 days, so we know which of our own posts and ads work. Our pageview analytics are otherwise cookieless.
Local Storage: We store your settings, the last forecast and your unsynced marks in your browser's local storage, and areas you save for offline in its cache, so the chart works with no signal.
Data Security
We use industry-standard security measures including encrypted connections (HTTPS), secure authentication, and access controls. Row-level security policies ensure you can only access your own data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data Retention
We retain your account data for as long as your account is active. Marks are kept until someone deletes them. When you delete your account, we delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.
Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate personal data
- Delete your personal data
- Export your data in a portable format
- Object to or restrict certain processing
To exercise these rights, contact us through the contact form inside the app.
Children's Privacy
Our service is not directed to anyone under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
International Data Transfers
Our services are hosted in the United States. If you access the service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
Changes to This Policy
We may update this policy from time to time. We will post the updated policy on this page and revise the "Last updated" date at the top. Material changes will be communicated by email or through the service. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions or to exercise your rights, contact us through the contact form inside the app.