Plotroom is an independent personal project. It is developed and
operated by Damian Manda as a personal tool for planning and sharing vessel voyage
routes. Plotroom is not an official U.S. Government or NOAA system,
and it is not affiliated with, sponsored by, or endorsed by the
National Oceanic and Atmospheric Administration (NOAA) or any government agency. It is
provided on an "as is" basis for evaluation.
This policy explains what information Plotroom collects, how it is used, and the
choices you have. It applies to the Plotroom web application and its associated
services.
Information we collect
Account information — the email address and name you provide when
you register, and the display name, rank, role, and vessel assignment set for your
account (some of these are assigned by an administrator).
Authentication data — if you register with a password, it is
stored only as a salted cryptographic hash (argon2id); we never store your plaintext
password. If you sign in with Google, see "Google sign-in" below.
Content you create — routes, waypoints, overlays, comments,
passage plans, and related planning data you enter or import.
Vessel position and track data — the app displays ship positions
and tracks sourced from public maritime feeds (such as public AIS data) and, where
configured, other position feeds. This describes vessels, not your personal browsing.
Technical and security data — a session cookie to keep you signed
in, your IP address (used for security, rate limiting, and server logs), and
timestamps of activity.
Google sign-in
If you choose "Sign in with Google," we receive your Google account email
address, name, and basic profile information, used solely to create
and authenticate your Plotroom account. Plotroom's use of information received
from Google APIs adheres to the
Google API Services User Data Policy,
including its Limited Use requirements. We do not use Google user data for advertising,
we do not sell it, and we do not share it with third parties except as needed to operate
the service.
How we use information
To operate the application — authenticate you, and let you plan, share, review, and
approve routes.
To send transactional email only — account verification, password
reset, and route-approval workflow notifications. We do not send marketing email.
To keep the service secure — rate limiting, abuse prevention, and diagnostic logging.
How information is shared
We do not sell your personal information. Information is processed by a small number of
service providers strictly to run the app:
Google Cloud (United States) — application hosting and database.
DreamHost — outbound email delivery for the transactional messages
above.
We may disclose information if required by law, or to protect the rights, safety, or
security of users and the service.
Data retention and your choices
Account and content data is retained while your account is active.
You can view and update your profile information within the app.
You may request access to, correction of, or deletion of your personal data by
contacting us at the address below. We will delete your account and associated
personal data on request, except where retention is required for legal or security
reasons.
Cookies
Plotroom uses a single, essential session cookie (HttpOnly, Secure,
SameSite=Lax) to keep you signed in. It is not used for advertising or cross-site
tracking, and there are no third-party advertising cookies.
Security
Access is over HTTPS. Passwords are hashed with argon2id, application secrets are held
in a managed secret store, and sessions can be revoked. No system is perfectly secure,
but we take reasonable measures to protect your information.
Children
Plotroom is a professional tool and is not directed to children. We do not knowingly
collect personal information from anyone under 13.
Governing law
This policy and your use of Plotroom are governed by the laws of the United States,
without regard to conflict-of-laws principles.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by a
new effective date at the top of this page.