DiveVis › Privacy policy

Privacy policy

DiveVis is a free dive and snorkel conditions forecast for Hawaii. It collects as little as it can, shows no ads, and never sells or shares your information for marketing.

Last updated November 8, 2026.

Without an account

• Server logs. Each request's IP address, browser (user agent), the page asked for and the time, to keep the site running and safe (spotting abuse and attacks). Kept 90 days.
• Usage counts. Which screens and spots are opened, under a random id stored in your browser. It is never linked to an account or to your name. Kept 90 days.
• Your island. On a first visit your IP address is looked up in a local database (DB-IP) to open the app on the right island. The result isn't stored. "Use my location" runs only on your device; your position is not sent to us unless you ask for a forecast at that point.
• Settings on your device. Theme, units, the island you picked and the edit keys of dive plans you made are kept in your browser's storage, not on our server.

With an account

• Your email address, to sign you in (we email a one-time code) and to tell you apart.
• Sign in with Google. If you choose it, Google tells us your email address, whether Google has verified it, and a Google account id. We ask for nothing else: no name, photo, contacts or Google data. We use them only to sign you in to DiveVis.
• What you save: starred spots and places, alerts, dive plans and their reminders.
• Signed-in devices: the browser type of each device, and when it signed in and was last used, so you can see and sign out your devices.
• Sign-in records: codes asked for, wrong codes and sign-ins, with the email and IP address, to limit abuse. Kept 30 days.

Everything in an account is kept until you delete the account.

Notifications

If you turn notifications on, your browser gives us a push address (run by your browser's maker: Google, Apple or Mozilla) and we store it with the island you follow, and your account if you're signed in. Messages go through that push service, encrypted. Turning notifications off removes the address.

Contact form

Messages sent from the contact page (your name, email, topic and message, with your IP address and browser) are kept 180 days and emailed to us. We reply by email; we don't add you to any list.

Cookies

Only ones the site needs: a sign-in cookie that keeps you signed in (one year, renewed as you use it), and a short-lived one during "Sign in with Google" (10 minutes). No advertising or tracking cookies, and no third-party analytics.

Who else handles data

• DigitalOcean hosts the server and database (United States).
• Resend sends our emails (sign-in codes and contact messages).
• Google, only if you use Sign in with Google.
• Push services (Google, Apple, Mozilla) deliver notifications you turned on.
• OpenStreetMap serves the map pictures to your browser, so it sees your IP address like any website you load.

Forecast data (weather, ocean, tides, rivers, satellite) is fetched by our server from public sources; none of your information is sent with those requests. We don't sell personal information, and we only disclose it if the law requires it.

Your choices

• See and download what your account holds: Account › Download my data in the app.
• Delete your account: Account › Delete account. It removes your email and everything saved to the account straight away, including the link to your Google account. You can also remove DiveVis from your Google account at any time in Google's security settings.
• Anything else (a question, a correction, removing log entries): write to contact@divevis.com.

Security

The site is served only over HTTPS. Sign-in codes and session tokens are stored only as keyed hashes, and there are no passwords to leak.

Children

DiveVis isn't aimed at children under 13 and doesn't knowingly collect their information.

Changes

If this policy changes, the new version is posted here with a new date. For a change that affects what is kept about account holders, we'll say so in the app first.