Privacy & Safety

Who we are

WHERE TO GO (wtg.fish) is operated by Brownsolve Limited (Company No. 828404, registered in Ireland, incorporated 16 October 2026). Controller contact: fmbrown12@gmail.com. We are the data controller under GDPR.

What we collect and why

• Account: name, email, hashed password, saved waters, gear, species preferences, skill and age band, and optional profile settings. These support sign-in and personalisation.
• Location — nearby water: your browser's GPS, to show nearby water on the map and to answer "near me" questions in The Captain. A temporary copy is kept in session storage; location is sent with nearby requests. Safety sessions and catch locations have separate storage described below. We do not sell location data.
• Location — Safety Beacon: if you start a safety session, we store your position pings so that if you are overdue, your chosen emergency contact can be told your last known location. Session positions are not public by default. Closed or expired sessions become eligible for active-database cleanup after 7 days, on the periodic cleanup pass. Recovery copies are handled separately. If you create a session share link, anyone holding that read-only link can see your session spot, status and last known location — that is deliberate (it is a rescue link), so share it only with people you trust.
• Report-it reports: if you report pollution, poaching, fish in distress or an invasive species, we store the report (type, description, county and water name, and a contact detail only if you give one) so you have a history and a reference number. We do not attach GPS coordinates; avoid putting private details in free text. We forward nothing automatically — you make the call to Inland Fisheries Ireland or the biodiversity record yourself.
• Offline cache: waters you save and verdicts you view are stored in your browser (IndexedDB and the service-worker cache) for limited offline reading. Cached or delayed content is not a current warning, forecast or safety assessment. Cached copies are held on your device — clear your browser storage to remove it.
• Condition reports: if you post an angler condition report, we store your line of text and a condition tag against the water (county/water level — never a precise mark). Reports are shown without usernames, expire after 7 days, and one active report per water is kept per angler (a new one replaces your old one). Reading reports needs no account; posting requires a signed-in account.
• Personal heatmap: your "Where I've fished" heatmap is derived only from your own catch log. It is visible only to you, on your own account page. There is no shared personal heatmap. Separately, catches you deliberately share or enter in public competitions may appear on public maps; withdraw sharing to remove that publication.
• Emergency contact: only if you choose to add one to a safety session. When overdue, WTG attempts email after a 30-minute grace period. The alert includes account/session details and the last recorded location. The operator receives a copy and is the fallback recipient if no contact email was supplied. Phone numbers do not receive automatic calls or texts. Delivery is not guaranteed; WTG is not a rescue or monitoring service.
• Password resets: if you request one, a single-use, one-hour reset token (stored hashed). Passwords themselves are never stored in readable form.
• Catch reports: species, date, size, notes, optional mark and photo link that you submit. These are private unless you explicitly share them or enter a public competition. Conditions are not automatically attached to every catch.
• Business enquiries: messages and sender contact details are stored and may be emailed to the listing operator. These are not automatically linked to your account for deletion; request a separate review.
• Photo fish identification: if you submit a photo, it is processed in memory to suggest likely Irish species and is not saved, logged or shared by us. The displayed match score ranks candidates; it is not a probability or a guarantee.
• Cookies: browser storage supports sign-in, temporary location, offline copies and installation preferences. See the storage notice for details.

Your rights (GDPR)

Access, rectification, erasure, portability, objection — and the right to complain to the Data Protection Commission. The deletion endpoint removes your identity and supported account-linked records from the active application database. Business listings, products, enquiries and unlinked reports require separate identity-reviewed handling. Recovery copies and third-party records are handled separately; no universal purge deadline is promised here. You can delete your account yourself from your account page; an active subscription is cancelled as part of that request, and the billing record itself is retained by Stripe as the payment processor. For rights requests, email fmbrown12@gmail.com for any of these.

Where data lives

Application records are held on the operator's server. Email processing includes password resets, safety alerts, saved-water GO messages when configured, and business enquiries. Stripe processes payments. Maps and imagery can load directly from third parties and receive network metadata; opening Google Maps sends the selected destination to Google. Optional AI processing can send your question, relevant mark facts and profile preferences to the configured service. Processor identities, hosting location and retention terms must be confirmed before general release. See our cookies notice. We never sell data. Data sources have different terms and attribution requirements; see Data & attribution. A provider name is not blanket permission to reuse every asset.