Privacy Policy
BreakAtlas is a static site with no accounts, no tracking cookies and no analytics script. This page says exactly what that leaves — and what your rights are over it.
· Written in plain English on purpose
The short version. You can read every page here without an account, without consenting to anything, and without a single tracking cookie being set. Your web server request reaches a Swiss host, which keeps a short-lived log. One entry in your browser's local storage remembers whether you chose dark mode. That is the whole picture today.
Who is responsible
Honeygoat GmbHKägenstrasse 21
4153 Reinach BL
Switzerland
info@breakatlas.com
Honeygoat GmbH is the controller for the purposes of the EU and UK General Data Protection Regulation and the Swiss Federal Act on Data Protection (revFADP/revDSG), and the business responsible under US state privacy laws. Contact details are on the legal notice.
What runs on this site today
| Component | What it means for your data |
|---|---|
| Static pages | Every page is built in advance and delivered as a file. Nothing is assembled from your data at request time. |
| Fonts | Served from this domain. No request goes to Google Fonts or any other font host. |
| Analytics | None. There is no measurement script on this site — not even a cookieless one. |
| Advertising | None running. See advertising and affiliates for what is planned and what will change here first. |
| Social buttons | None. Links to profiles are plain links that load nothing until you click. |
| Comments, forms, newsletter | None. There is nothing on this site to type into. |
| Local storage | One entry, theme, written when you switch between light and dark. Details in the cookie notice. |
Server logs
BreakAtlas is hosted by Infomaniak Network SA in Switzerland. Like every web server, it records each request so the service can be operated and defended against attack. A log line contains your IP address, the time, the page requested, the referring page if your browser sends one, and your browser and operating system version.
These entries are kept for a short period and then deleted. They are used to keep the site running and to investigate abuse — never to build a profile, and never combined with anything else. Legal basis: legitimate interest in a functioning, secure service (Art. 6(1)(f) GDPR).
Where the surf data comes from — and why that matters here
Buoy readings, tide predictions, wave models and forecasts are fetched from our build server, not from your browser. When you open a spot page, the numbers are already in the HTML. NOAA, the National Weather Service and every other upstream source therefore never see your IP address, your browser or the fact that you looked at a particular beach.
This is a deliberate design choice and not a side effect. A page that fetched live data client-side would leak a visitor list to four federal endpoints on every view.
Surf cams and embedded media
Spot pages will link to publicly operated surf cams, and some may embed a public stream where the operator allows it. An embedded stream is a connection from your browser to that operator, which means they receive your IP address and can set their own cookies.
Any such embed is loaded only after you click it — a placeholder stands in until then, so no third party is contacted while you are simply reading the report. Where an operator's terms rule out embedding, the page links out instead. The rule is written down in full on the copyright page.
Advertising and affiliate links
No ad network and no affiliate program is active on this site at the date above. When that changes, this policy and the cookie notice are updated before the first script goes live, and visitors in regions that require a consent choice receive one.
Affiliate links, when they appear, are marked at the link and carry
rel="sponsored nofollow". Clicking one hands you over to the retailer, who
sets their own cookies under their own policy. Reading BreakAtlas never requires clicking
one. The full arrangement is on the
advertising and affiliate page.
Your rights under US state privacy laws
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have rights over personal information held about them. We honor the following requests regardless of whether our size brings us within any particular state's thresholds:
- Know and access — what personal information we hold about you, where it came from, and what we did with it.
- Delete — ask us to erase it.
- Correct — have inaccurate information fixed.
- Opt out of sale, sharing and targeted advertising — see the statement below.
- Non-discrimination — exercising any of these changes nothing about the site you receive. Every page here is free and identical for everyone.
Sale, sharing and targeted advertising
BreakAtlas does not sell personal information, and does not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act as amended by the CPRA and in comparable state laws. We have never done so. If a future advertising partner would change that, this page states it plainly and an opt-out link appears in the footer before any such processing begins.
We honor the Global Privacy Control signal. Since no sale or sharing takes place today, there is nothing for it to switch off — which is the point.
Categories of personal information
| Category (CCPA §1798.140) | Collected? |
|---|---|
| Identifiers (IP address) | Yes — in server logs only, short-lived |
| Internet activity (page requested, referrer, user agent) | Yes — in server logs only, short-lived |
| Name, postal address, email, phone | Only if you email us, and only from your message |
| Commercial, biometric, geolocation, employment, education, financial data | No |
| Sensitive personal information | No |
| Inferences or profiles | No |
Your rights under the GDPR and Swiss law
If you are in the EU, the UK or Switzerland you may request access, rectification, erasure, restriction of processing, data portability, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time with effect for the future.
You may also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), in the EU the authority of your country of residence, in the UK the Information Commissioner's Office.
Legal bases used here: legitimate interest for server logs and security (Art. 6(1)(f) GDPR), consent where a third-party embed or an advertising partner requires it (Art. 6(1)(a) GDPR), and contract or legitimate interest for answering an email you send us (Art. 6(1)(b) and (f) GDPR).
How to exercise any of this
Write to info@breakatlas.com from the address in question, or by post to Honeygoat GmbH, Kägenstrasse 21, 4153 Reinach BL, Switzerland. Say which right you are exercising. We respond within 45 days for US state law requests, within one month for GDPR requests, and usually much sooner. An authorized agent may act for you with written proof.
Because this site holds no account data, an access request will in most cases return very little — which is a good answer, not an evasive one. Where a short-lived log line has already been deleted, it cannot be produced, and we will say so.
Children
BreakAtlas is a general-audience reference site and is not directed at children under 13. No personal information is knowingly collected from them. Should we learn that a child has sent us personal information, it gets deleted. Parents and guardians who suspect this has happened can write to the address above.
International transfers
Hosting and data processing take place in Switzerland. Switzerland is recognized by the European Commission as providing an adequate level of data protection, so no additional transfer mechanism is required for visitors from the EU. Where a future partner processes data in the United States, transfers are covered by EU Standard Contractual Clauses, the Swiss-U.S. Data Privacy Framework, or both — and the partner will be named here.
Retention
| Server log entries | Kept briefly for operation and abuse defense, then deleted |
|---|---|
| Email correspondence | Kept as long as the matter is open, plus any statutory retention period |
Local storage theme | Stays in your browser until you clear it. It never reaches our server. |
Changes to this policy
The date at the top of this page is the date of the last substantive change, maintained by hand rather than stamped by the nightly build. A policy whose date moves every night says nothing about whether the text moved. When something material changes — a new partner, a new script, a new category of data — it appears here before it appears on the site.