Suroît

Privacy and personal data

Last updated: 10 November 2026. The French version is the reference.

Who is responsible

Suroît is published by Arthur Lhoste. For any question about your data, or to exercise your rights: arthur@lhoste.org, +33 6 70 07 20 93, or the "Problème ou idée" (problem or idea) menu in the app.

The data we keep

  • Your account: name, email address (or username), password encrypted irreversibly (we cannot read it), registration date and, if you sign in with Google, the identifier of your Google account.
  • The information given when registering: sailing programme, race, home port, equipment.
  • Your profile, if you fill it in: photo, boat name and type, length, programme, experience, a few words.
  • Your routes saved in your account (points, departure time, computed route).
  • Your feedback (problems and ideas): the text, the screenshots you attach, the technical information if you leave it ticked (version, browser, screen size, time zone, map area, forecast and polar used), and our exchanges.
  • The routes you share by a link: the route, the wind around it, a preview image and, if you choose, your name and photo.
  • Technical security information: IP address and date of sign-in and registration attempts, to block repeated password guessing.

These stay on your device and are not sent to us: downloaded weather forecasts (GRIB), the polars you import, the logbook and your boat's positions.

Why

To run your account and the app, find your routes from one device to another, answer your feedback, fix problems and protect accounts. We do not sell your data, we show no advertising and we use no advertising tracker or audience measurement tool. The legal basis is the performance of the service you request by creating an account and, for security, our legitimate interest in protecting accounts.

How long

  • Account, profile and routes: as long as the account exists; an account inactive for 3 years may be deleted, after a reminder email.
  • Shared routes: 90 days, then deleted automatically (you can also delete them earlier).
  • Feedback: 2 years after the last exchange, or until your account is deleted.
  • Sign-in and registration attempts: 30 days at most.

Where your data is

On the servers of our host OVHcloud, in France. Only the Suroît administrators can access it.

To work, the app also contacts outside services that receive your device's IP address, as with any website: base maps (CARTO, OpenStreetMap, OpenSeaMap), weather forecasts (Météo-France, Met Office, Open-Meteo, NOAA, ECMWF). The artificial-intelligence weather analysis, reserved for some accounts, sends images of the map and the route summary to Anthropic (provider of the Claude model), without your name or email address.

Sign in with Google

You can create your account or sign in with the “Continue with Google” button. Google then sends us your name, your email address and the identifier of your Google account, and nothing else: not your password, your contacts or your photo. We do not send Google any information about how you use Suroît.

This button is provided by Google: it is loaded from Google's servers when the sign-in window opens, and Google receives your device's IP address at that moment. You can withdraw this access whenever you like in your Google account (myaccount.google.com/connections). Your Suroît account remains usable: “Forgot your password” lets you choose a password for it.

Cookies

A single Suroît cookie, which is essential: the one that keeps your session open (30 days). If you use Google sign-in, Google may set its own cookies, which are needed for that sign-in. The app also keeps your settings in your browser's storage, including the language you choose on this site. No advertising or audience measurement cookie: so no consent banner is needed.

Your rights

You can view and correct your information at any time (account menu, "Mon profil") and delete your account ("Mon profil", at the bottom): your account, profile, photo, routes, feedback and shared links are then erased. You can also write to us to get a copy of your data, object to processing or ask a question. If you believe your rights are not respected, you can contact the CNIL, the French data protection authority (cnil.fr).