Privacy Policy

This policy explains what personal data KMS Vessel Tracker ("we", "the service") collects, why, and what rights you have.

1. Data controller

The data controller is Kabantsov Maritime Services, Vitalii Kabantsov (ENK), org. no. 834 097 192, Skien, Norway. Contact for all privacy matters: support@kmsvesseltracker.no.

2. Data we collect

• Account data: email address, and optionally your name, company name and work phone.
• Sign-in with Google/Apple: if you use social sign-in, we receive your email and display name from the identity provider.
• Content you create: vessels, terminals, cargo details, clients, notes and imported files.
• Technical data: for each active session we record the device and browser type and the IP address it was signed in from, so that you can review your sessions and sign out any you do not recognise; plus standard server logs (IP address) kept for security purposes.

We do not collect location data, advertising identifiers, or any data from your device beyond the above.

3. Why we use it & legal basis

• To provide the service: your vessel list, schedules and notifications — legal basis: performance of a contract (GDPR Art. 6(1)(b)).
• To send account-related emails (verification, password reset) — performance of a contract.
• To secure your account: session management, server security logs — legitimate interest (GDPR Art. 6(1)(f)).
• Support and abuse prevention: our staff may access your account data only to provide support you requested, investigate abuse, or resolve technical issues — legitimate interest (GDPR Art. 6(1)(f)). All administrative access is logged.

We do not sell personal data, show ads, or use third-party analytics trackers.

4. Where data is stored

All data is stored on servers located in the European Union (Germany). Authentication for social sign-in is provided by Google Firebase.

5. Third parties

Vessel schedule and position data is retrieved from public maritime sources (Norwegian Coastal Administration / Kystverket, BarentsWatch). No personal data about you is ever sent to these sources.

6. Data retention & account deletion

You can delete your account at any time in Account settings → Danger Zone (web) or in the mobile app. Deletion is immediate and permanent:

• Your personal data (name, email, phone, company, sign-in credentials) is erased immediately.
• Your sessions on all devices are terminated.
• Your social sign-in link (Firebase) is deleted.
• Your vessels and related records are permanently purged within 7 days.
• If your account was removed for a Terms of Use violation, or you delete it yourself, we keep a one-way cryptographic fingerprint of your email address — never the email itself, and it cannot be reversed back into one. For a violation, this prevents opening a new account with the same email (legitimate interest, GDPR Art. 17(3)(e)); for a self-deletion, it only guards against re-claiming a trial or promotional offer if the same email registers again later (legitimate interest, GDPR Art. 6(1)(f)).

7. Your rights (GDPR)

You have the right to access, correct, export or erase your personal data. Most of this you can do directly in the service; for anything else contact us and we will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local EU supervisory authority.

8. Cookies & local storage

We use a single strictly necessary cookie (kms_session) that keeps you signed in. It is set only when you log in, is not readable by scripts (HttpOnly), is sent over HTTPS only and is never shared with third parties. Under the ePrivacy rules such essential cookies do not require a consent banner — which is why you don't see one.

We use no analytics, advertising or cross-site tracking cookies of any kind. Display preferences (theme, card size, map position) are stored locally in your browser and never leave your device.

9. Changes

We may update this policy as the service evolves. Significant changes will be announced on the home page.

Questions or data requests: support@kmsvesseltracker.no