Privacy policy

For your account on the platform, PortPoint is the data controller. For your purchases, bookings and details at an individual site, the site (the harbour, the campsite or the car park's owner) is the data controller and PortPoint is the data processor handling the data on the site's behalf.

Account details: email address, name and mobile number if you provide it. Details about your boat or vehicle: name, model, registration number, dimensions and an optional photo. Purchase and booking history: product, amount, time and chosen berth or zone. Technical data required for operations and security, such as IP address for protection against overload and abuse.

The data comes primarily from you or is created when you use the service. One exception: if you rent a seasonal berth or hold a lease, the site may have registered your name and contact details in its register – we then process them as a processor for the site. The same applies if you apply for a berth via a site's information page: the application with name, contact details, boat details and message is stored in the site's queue. No data is collected from external registers or purchased.

The data is needed to complete the purchase and show the receipt (contract), for the site's accounting (legal obligation) and to protect the service against abuse (legitimate interest). We never sell personal data, never use it for advertising and send no newsletters.

Only authorised staff at the site you buy from see your data there – for example name, contact details, vehicle and payment status, which are needed to receive you as a guest and handle checks on site. At PortPoint, only staff with operational responsibility have access. The data is never passed on to any outside party other than the suppliers listed below.

Data is stored with our database provider Supabase and the service is delivered via Cloudflare. Receipt and invitation emails are sent via Resend (EU region). Satellite and map imagery is fetched by your browser directly from the map provider (Esri), which then sees your IP address but nothing more. Payments are made directly between you and the site via the payment service (for example Swish) – PortPoint never handles your means of payment and never stores card numbers or bank details.

Account details remain until you delete the account (under Profile). Guest accounts without activity are deleted automatically after 30 days. Receipts are kept anonymised in the site's accounts for as long as the Swedish Accounting Act requires. Seasonal and lease registers are kept for as long as the site needs them for its business. Berth applications are deleted automatically one year after a rejection and at the latest two years after submission if they have not been processed. Technical logs are kept only as long as they are needed for operations and troubleshooting.

PortPoint uses only necessary cookies: your login session and a few pure convenience settings, such as the theme in PortAdmin. There are no analytics, tracking or advertising tools – no Google Analytics, no third-party cookies – and therefore no cookie banner is shown. If you pay by card, Stripe's payment form is loaded, which sets its own cookies to detect fraud. Every cookie and everything stored in the browser is described in the cookie policy.

All traffic is encrypted with HTTPS. Access to the database is governed by row-level permission rules, so a site only reaches its own guests and you only your own data. Administrator accounts can be protected with two-factor login, and internal routines limit access to what the work requires.

You have the right to access your data, to have incorrect data corrected or deleted, to receive the data you have provided in a portable format (data portability) and to object to or request restriction of processing. You delete your account yourself under Profile; other requests are sent to portpoint.se@gmail.com. If you believe the processing is unlawful, you can complain to the Swedish Authority for Privacy Protection (IMY).

The policy is updated as the service changes, and the latest version is always available on this page, with the date at the top. Questions about privacy and security are sent to portpoint.se@gmail.com.