mervare.app and all <marina>.mervare.app subdomains.We try to be honest and minimal. There is no advertising network and no cross-site tracker on this site. We do measure two things — how many people visit which pages, and how fast those pages load — using Vercel's cookieless analytics. Section 5 sets out exactly what they send, what they never send, and the one identifier involved. The tables below list every cookie and browser-storage item the site sets, what it is for, and how long it lives.
Mervare is operated by the site administrators reachable at kepsic@gmail.com. Email us for any data-protection request — access, rectification, erasure, portability or objection under GDPR Articles 15–22.
These are required to operate the site. Under the ePrivacy Directive (2002/58/EC, Art. 5(3)) they do not require your prior consent. They are HTTP-only, Secure and SameSite=Lax.
Stored in your browser's localStorage on this device. Never sent to our servers. Clearing your site data removes them.
For signed-in users: email address (login), display name, the boats you own or have access to, and any data you choose to publish on your boat page (photos, documents, guestbook entries, relay-scenario settings).
For boats with telemetry: position, wind, depth, battery and similar measurements transmitted by your on-board gateway. This data is associated with your boat slug and retained as a rolling history (typically 90 days for full-resolution samples, longer for daily aggregates).
For marina staff: the booking calendar, guest contacts and Stripe payout details you enter into the marina dashboard.
For harbour photos you choose to send for review (a pilot at one Estonian harbour): the photo, re-encoded so that all camera data including GPS location is removed before it is stored; the date it was taken; the harbour, view and credit you chose; the licence terms you accepted; and, only if you give it, an email address. A declined photo is deleted when it is decided, and you can withdraw your photo at any time from your private link. A published photo is shown with your chosen credit under CC BY 4.0.
These run as separate data processors. Loading any map or payment view sends your IP address to the corresponding provider — that is unavoidable, the same way visiting any web page reveals your IP to the host.
4g) and your country. It attaches no visitor identifier at all (what it collects)./p/…), a door link and its guest token (/d/…), and every query parameter that is not on a short allow-list (language, country, campaign). Questionnaire pages under /kysitlus/ send no analytics event at all, so answering a survey stays anonymous, and operator pages under /admin/ send none either.Under GDPR you may request access to, correction of or deletion of your data, restrict or object to processing, and receive a machine-readable export. Email kepsic@gmail.com — we respond within 30 days. You also have the right to lodge a complaint with the data-protection supervisory authority of your country (for example Andmekaitse Inspektsioon in Estonia, CNPD in Portugal or IMY in Sweden).
If we add anything that needs explicit consent (behavioural analytics, advertising, anything stored on your device or tied to an identifier) we will replace the informational notice with a proper accept / reject prompt before the new tracker runs, and bump the date at the top of this page.