What we keep
- Your account: your email address and password (if you set one). Your password is stored scrambled, so nobody can read it, us included. If you sign in with Google, the name, profile picture and Google account ID that Google shares are kept with your account, along with your email address. Google acts as a sign-in provider under its own privacy policy, and we receive only the basic profile you agree to share (no contacts, calendar or Drive access).
- Your dives: everything you log or import, including the original file from your dive computer and the depth profile it contains. An original file stays stored after you delete the dives imported from it, until you delete your account.
- Your gear: the items in your gear locker.
- Your diver profile: your weight and build, used only to suggest how much ballast to carry.
- Your feedback: messages you send us through the feedback form.
- Your language: English or Polish. It is saved to your account when you sign up or switch language, and for older accounts the first time you sign in. We use it to show the app, and to write the account emails we send you, in that language.
- Your sign-in records: when you signed up and last signed in, and for each device you're signed in on, its IP address and browser type. They keep you signed in and let us spot misuse.
We don't ask for your name, address, date of birth or payment details. If you sign in with Google, we keep the name Google shares, as described above.
Why we use it, and for how long
We use your data only to run your logbook: to show your dives, work out your statistics and ballast suggestions, and keep you signed in. If you send us feedback, we use it to improve 67xDives and, if needed, to reply to you by email. We don't sell it, share it with advertisers, or use it for marketing.
We keep it for as long as you have an account. When you delete your account, it is erased straight away, with the exceptions explained under Your rights.
Where it's stored, and who helps us
A few companies run parts of 67xDives for us. They handle your data only on our behalf and only for the job described here.
- Supabase
Runs our database and sign-in, on servers in Ireland (EU). It stores your account (with your password scrambled) and your whole logbook: your dives with the original files from your dive computer, your gear, your diver profile and your feedback.
It also handles signing in: it keeps your sign-in records and the security log described under What deletion doesn't remove, and it asks Resend to send our emails. Like Vercel, it keeps short-lived technical logs of requests to run and protect the service.
- Vercel
Hosts the website, and keeps short-lived technical logs of requests (including IP address) to run and protect it. It also counts page visits and measures how fast pages load, without cookies and without following you to other sites.
- Resend
Sends our emails, such as sign-up confirmations and password-reset links, from servers in Ireland (EU). It receives your email address and the content of each email.
- Sentry
Records errors, diagnostic logs and anonymous performance measurements (such as how long a request took) so we can fix problems. Error reports and logs are set up to leave out your account details, anything you type into forms, your cookies and the content of your dives, gear, profile and feedback; they record only what kind of error happened.
It also records a notice, without the message itself, each time you send feedback, so we know to read it.
When an error happens in your browser, Sentry also keeps a replay of your visit from about a minute before the error until you leave (at most an hour), so we can see what went wrong; all text, everything you type and all images are hidden in that replay.
Sentry keeps all of this in the EU for 30 days and does not store your IP address.
Cookies
We use only two kinds of cookie, both needed for the site to work the way you expect:
- Sign-in cookies: keep you signed in, so you don't have to log in on every page.
- Language cookie: remembers your language, so the site opens in it. It is set when you pick a language, and again each time you sign in, from the language saved on your account.
There are no advertising or tracking cookies, which is why you don't see a cookie banner.
Your rights
You don't need to ask us. From Settings you can, at any time:
- Download your data: one file with your account details, dives, gear, diver profile and feedback, in a standard format (JSON) that other apps can read. Your original dive-computer files are listed in it as download links that work for 24 hours.
- Delete your account: your account, dives, gear, diver profile and feedback are removed straight away. This can't be undone, so download your data first if you want a copy.
- Correct your data: edit your dives, gear and diver profile directly in the app.
For anything you can't do yourself, email us at the address below. You also have the right to complain to your local data protection authority.
What deletion doesn't remove
We keep a security log of sign-ins, sign-outs and sign-ups, including the email address and IP address used. It helps detect break-ins and abuse, so it isn't erased when you delete your account. Each entry is deleted automatically after 90 days. Error reports, feedback notices and replays already sent to Sentry (see above) also stay until they expire, 30 days after they were recorded; they contain no dives, gear, diver profile or feedback content. None of your dives, gear, diver profile or feedback survives deletion.
Who we are, and how to reach us
67xDives is run by the operator of 67xdives.app, who is responsible for your data (the "data controller"). Questions about this policy or your data: privacy@67xdives.app.
Last updated: 14 October 2026