Privacy notice

Who we are

fishyfishy.eu is run by Infranet Partners Systems OÜ, registry code 17539134, Mäe tn 4, Väätsa alevik, Türi vald, Järva maakond, 72801, Estonia. We decide how personal data on the site is used, and we are responsible for it. For anything about your data, write to infranetsystems@proton.me, or use Help & contact on the site.

In short

We keep what the site needs to work and to stay safe: your account, what you post, and some technical records. We don't sell your data and we don't show ads. The site sets only its own cookies, for things like keeping you logged in. Other members don't see your email address. Under Settings you can download your data and delete your account yourself.

What we keep, and why

Your account: your username, email address, password (kept only in a form nobody can read back), country, language, your settings, and when you accepted the terms. We need these to give you the site. This is our agreement with you.

What you post: your profile, catches, trips, photos, comments and reactions, who you follow, the trips you plan and the people you invite, your lists and notes. We keep it to show it in the ways the site works, to the people you choose. You decide what is public and what stays private. Your comments and likes show with your name. The angler you follow sees that you follow him. Your trips are shown to the anglers who follow you, unless you turn that off. This is also part of our agreement.

Location: the site uses a location only when you give it, for example the place of a catch. Once you have allowed it, the Add catch form takes your location by itself when it opens, and you can clear it there. It does not follow your phone in the background. The location of a catch or a water is also used to show its weather and its map.

Photos: we keep our own copies, without the camera's data such as its location or the device. To keep the records fair, we may check a photo's own details, such as when and where it was taken, compare it with the other photos on the site, and keep only the result. While a catch is still a draft, the location its photo carries waits with it, for at most 30 days.

Trips with others: when you join a trip someone plans, the people on it see that you are coming. The trip's talk is read only by the people who said they are in, and by the organiser. An organiser who runs trips for others keeps notes about them, for example who is coming, whether, how often and when an invitation was opened, and whether a payment was made. You see what concerns you.

How the site is used: we count how the site is used, for example how many people visit and which pages they open. This helps us understand what works and make the site better. We do it with our own tools, on our own servers, not through advertising or analytics companies. For visitors without an account, we never keep the internet address: we keep a scrambled code made from it and the browser, only to count each visitor once. This is our legitimate interest in running the site.

Safety and technical records: when you log in, we keep the time, the IP address and the browser. We keep a record of failed logins, of reports, of what was done on the site and by whom, such as a catch removed or an account suspended, and of short notes our staff write to each other about a catch or an account. The record does not keep the content of posts. Our servers keep short technical logs. We keep these in our legitimate interest: to keep the site and its members safe, and to be able to answer for what happened.

Emails: we send the emails the site needs, such as confirming your address or a password link, and the ones you keep on under Settings, such as an email when someone invites you to a challenge. News by email, if we ever offer it, is something you sign up for yourself.

Phone notifications: only if you turn them on, and only while they are on. We then keep the address your phone gives us for them, with the kind of phone and browser. This is based on your consent. Turn them off under Settings and the sending ends. If you remove a phone from the list, we keep its address, unused, only so that it is not added back by itself.

Messages to us: what you write through Help & contact, the email address you give there, and a photo if you add one. We keep them to answer you.

Greeting pages: our staff may make a page for one person, with that person's first name, reachable only through its link. It counts how often it was opened, not by whom. If a page carries your name, ask us and it goes.

When the law requires us to keep data or to hand it over, we do so on that basis.

Who sees what

Your username and profile are visible to everyone. So is what you make public, including to visitors without an account and to search engines. What you keep private is visible only to you. A planned trip is shown to the people on it, including who is invited. If you open its link while logged in, you are added as invited. Whoever opens its link sees what the trip is about before joining. If the organiser adds a meeting place, everyone with the link sees it too. If the organiser adds a phone number to a trip, only the people who are in see it, until the trip is over. An organiser account can also show a trip on its page: then everyone who opens the page sees its day, water, start time, meeting place, free places and price, and the account's followers are told of it. Who is coming is not shown there. If you join a trip's waiting list, the organiser sees your name and when you joined. An organiser's notes about its trips are seen only by that organiser, and by the owners where needed to help. Moderators see what is made public, including the place of a catch you hid, the reports and the record of actions — not email addresses, and not what you keep private. The owners of the site also see email addresses, the list of accounts and the messages sent to us, to run the site. We don't sell, rent or trade personal data. We give data to authorities only when the law requires it.

Who helps us

A few service providers help us run the site. They handle data only on our behalf, under data processing terms:

• hosting, for the site and its database;
• storage, for photos and encrypted backups;
• email delivery, for the emails we send;
• an email inbox, for the messages you send us.

Hosting and storage keep the data in the European Union; the email services may also handle it outside the European Union, with the safeguards the law requires. Weather services and OpenStreetMap's map services receive the location of a water or a point, not who you are. If you turn on phone notifications, the notification service of your phone or browser (for example Apple's, Google's, Mozilla's or Microsoft's) carries them, encrypted so that the service cannot read them. These services may also work outside the European Union.

Cookies

The site sets only its own cookies, and keeps a few things in your browser's own storage, such as a catch you are still typing. The cookies keep you logged in, protect forms against forged requests, and remember your choices, such as language and display. They don't follow you to other sites, and none of them is for advertising or tracking. The site needs them to work, so they don't ask for consent. The login cookie lasts until you log out, and at most a year after you last used it; the others last at most a year.

How long we keep it

Your data stays as long as your account does. When you delete your account, what you posted and your logins go at once. The account becomes a numbered placeholder without your name or email, so that the record of actions stays whole. Shared things others have joined, such as a challenge you started, stay for them without your name.

A few things are kept for a limited time:

• a catch a moderator removed: 30 days, in case it was a mistake;
• encrypted backups: 30 days, so something deleted can stay in a backup that long;
• a login: until you log out, and at most a year after you last used it; its IP address and browser: 30 days;
• server logs: a few weeks;
• messages to us: at most a year after we answered them, and no longer than your account;
• the counts of how the site is used: at most a year after the last visit; the record of emails sent: at most a year;
• the record of actions and reports: as long as needed to answer for what happened.

Data the law requires us to keep is kept for as long as the law requires.

Your rights

You may see, correct, download and delete your data. Most of it you can do yourself. Under Settings you can download your data as a file, and delete your account. If you want something the file does not contain, write to us and we send it. Your profile and catches you correct yourself. You may also ask us to correct something, to limit how we use your data, or object to its use. Where we rely on your consent, you can withdraw it at any time. Write to infranetsystems@proton.me; we answer within a month. If the site carries something about you and you are not a member, you can write to us too. If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Age

To register you must have reached the age at which your country lets you agree to a service like this yourself — in Estonia, 13. The registration form shows the age for the country you choose.

Changes

The date of the last change stands on this page. If we change something that matters to you, we tell members before it applies, by email or on the site.