Privacy

What Tender keeps about you

• Your name, and your email address, which is how you sign in.
• Your password, if you set one. It is held by Tender's sign-in service in a form nobody can read back.
• If you sign in with Google: the email address, name and profile picture link Google sends, kept with your sign-in. The name on the board is the one you typed.
• Your phone number, only if you add one.
• The skills you tick and the hulls you will sail.
• That you confirmed you are 18 or over, and when. Tender does not store your date of birth or your age.
• The race days you say you can sail.
• Boats you add, crew needs you post and their notes, your “I can” answers, your matches, and whether each one sailed.
• Messages in your match threads.
• If you turn on notifications, an address for your device that your browser's push service gives Tender.
• A record of each email and notification Tender sends you: what kind, to which address, and when.
• If the club admin suspends you or removes one of your messages: that it happened, and when.
• When someone gets an invite code or a password wrong, or asks for a reset link: a scrambled form of the internet address it came from and of the email address it named, which cannot be turned back into either, and when. Tender uses it only to stop anyone guessing, and deletes it after 15 minutes.
• Cookies that keep you signed in, and one that remembers for a year that this device has signed in before, so the sign-in page opens on the right tab.

Tender runs no analytics and shows no advertising. The sign-in page loads Google's sign-in button from Google.

Who can see it

• Every signed-in member can see your name, when you joined and when you finished your profile, your skills and hulls, the race days you are available, your boats, the crew needs you post, and who is matched with whom.
• Your email address and phone number are seen by you and by anyone you are matched with: once a skipper accepts your “I can”, the two of you can see each other's, and still can after the race. No other Tender screen shows them, the club admin's included.
• Your “I can” answers are seen by you and by the skipper whose post you answered.
• Messages in a match thread are seen by the two of you, and by the club admin, who can read any thread in order to moderate it. If the admin removes a message, its original text is kept where only the admin can read it.
• Your device's notification address is seen by you alone, and a suspension by you and the club admin.
• The record of emails sent is not shown to any member. The admin's screen shows only how many went out.
• Anyone not signed in sees none of it. The one exception is the club admin's contact address, which the Support page shows so that anyone can reach them.

The person who runs Tender for the club can reach the database behind it, as whoever runs any website can.

Who else handles it

• Supabase stores the database and runs sign-in.
• Vercel hosts the site.
• Resend sends Tender's emails, so it sees your email address and what Tender is telling you.
• Google, if you sign in with Google.
• Apple, Google or Mozilla, whichever makes your browser, delivers notifications if you turn them on.

Deleting your account

You can delete your account yourself from your profile: Delete my account. That removes your profile, your email address and phone, your availability, your answers, the messages you wrote, your notification devices, and your sign-in.

Some things stay, with your name taken off, so the club's record of each race day still adds up:

• a race you were matched for stays as a match with your side blank;
• boats you added stay, with no owner, so past races still show the boat;
• crew needs you posted stay, notes included;
• the record of emails and notifications sent to you stays, without your name, your email address or your device's notification address.

You can also ask for your account to be deleted, using the address on the Support page.

A copy of your data

Ask, using the address on the Support page, and you will be sent a copy of what Tender keeps about you.

Adults only

Tender is for adults. Everyone confirms they are 18 or over when they sign up, and Tender has no accounts for anyone younger.