Privacy Policy

Who we are

Jersey Beach App is operated by Pinkie & the Brain (a trading name registered in Jersey), Channel Islands, who is the data controller. Contact: pinkieandthebrain.com. We are registered with the Jersey Office of the Information Commissioner (registration number to appear here on completion).

Why we may process data (lawful basis)

For trader accounts we process personal data to provide the service you signed up for (performance of a contract under the Data Protection (Jersey) Law 2018). We rely on our legitimate interests for essential operations such as security and abuse prevention.

Islanders and visitors (no account)

The app requests weather, sea and tide data from Open-Meteo using fixed Jersey coordinates — not your location. We run no analytics or tracking SDKs. Conditions are cached on your device only.

Your location (optional). If you tap the locate button on the island map, iOS asks your permission and your position is drawn on the map on your device only— it is never stored, and never sent to us or anyone else. The map itself loads tiles from OpenFreeMap, a free open-source map service that receives only the standard technical request any website receives; the app also saves Jersey's map on your device so it keeps working offline.

Beach alerts (optional)

If you switch on notifications, we store an anonymous device token issued by Apple (APNs) or Google (FCM) so we can send the alerts you asked for — a good-beach-day heads-up, and any safety or weather warnings you enable. The token identifies your device, not you: no name, no account and no location are attached, and we never track what you open or tap.

The token is stored with Google (Firestore, London region) as our processor, and the notifications are delivered through Apple's and Google's push services. Turn alerts off in the app at any time and we stop using it — it is entirely opt-in.

Beach-trader accounts (optional)

If you create a trader account we store:

• Your email address — to sign you in and reset your password.
• Your business's public listing — name, emoji, description, beach, trading hours, and the spots/times/specials you post. These are public by design: the whole point is that islanders can see them.

This data is stored with Google (Firestore & Firebase Authentication), acting as our processor. Listing data is stored in the London (europe-west2) region; Firebase Authentication account records may be processed by Google outside Europe, safeguarded by the Standard Contractual Clauses incorporated in Google's Data Processing Terms, as required for transfers under the Data Protection (Jersey) Law 2018. We use this data solely to operate the beach-trader feature. We never sell it, share it with advertisers, or use it for marketing.

Advert cards

Some screens show a single, clearly-labelled advert from a local Jersey business. These are chosen and placed by us directly — there are no ad networks, no tracking, no advertising identifiers, and advertisers receive no information about you whatsoever. Advertising is flat-rate, so nothing about your usage is measured or shared.

Cookies on this website

The app itself sets no cookies at all. This website sets none of its own either — but it does load Google's reCAPTCHA on pages with a sign-in or a form, and reCAPTCHA sets its own Google cookies in your browser. We use it for one narrow purpose: proving a request comes from a real person rather than a script, so nobody can flood the trader portal or run up the bill on a free service built for the island. We get back a yes-or-no answer and nothing else — no profile, no identifier, nothing we could tie to you. We don't read those cookies and we can't.

We'd rather not set them at all, and we mention it because saying "no tracking" while a third party quietly sets cookies would be the sort of half-truth this page exists to avoid.

How long we keep it

Account and listing data is kept until you delete it (or delete your whole account), which removes it immediately and permanently. Past daily listings remain attached to your account until then so you can manage them. We keep no server logs of app users.

If something goes wrong

If a personal-data breach occurs that risks your rights, we will notify the Jersey Office of the Information Commissioner within 72 hours and affected account holders without undue delay.

Deleting your account

Traders can delete their account and all associated data at any time, in the app or on this site: Beach traders → Delete account & data. Deletion is immediate and permanent. You can also request deletion via the contact link above.

Your rights

Under the Data Protection (Jersey) Law 2018 and UK/EU GDPR you may request access to, correction of, or erasure of your personal data, and object to or ask us to restrict processing. Since we hold so little, the fastest route is usually the in-app deletion button; otherwise contact us and we will respond within 30 days. You also have the right to complain to the Jersey Office of the Information Commissioner (jerseyoic.org).

Children

The app is suitable for all ages. Trader accounts are intended for business operators aged 18 or over.

Changes

If this policy changes materially we will update this page and the date above.