← Search beaches

Privacy Policy

Last updated: October 28, 2026

Epic Beach Days helps you decide whether today is a good beach day. This page explains, in plain English, what we collect, why, who else sees it, how long we keep it, and how to delete it.

Epic Beach Days is run by Epic Beach Days LLC, 30 North Gould Street, Ste N, Sheridan, WY 82801, USA. Questions about privacy go to support@epicbeachdays.com.

The short version

  • You can check a beach without an account. We don't ask who you are for that.
  • If you sign in, we keep your email address, your saved beaches and your email settings, so the site works for you.
  • We don't sell your information, and we don't use advertising or tracking cookies.
  • Photos you stamp with “Snap a beach day” are made on your device and never uploaded.
  • You can delete your account yourself at any time. Everything we hold is deleted within 30 days, with two exceptions explained below (messages you send us, and Stripe's payment records).

What we collect

When you just look up a beach

You don't need an account. We don't store your searches against you.

  • Searches for beaches we don't cover yet. When you search for a beach we don't cover, we add one to a count for that beach name, with the dates it was first and last searched. The count holds no name, email, IP address or account. It's how we decide which beaches to add next. We keep it.
  • Basic request information. Like every website, our hosting provider (Vercel) sees your IP address, your browser type and the page you asked for when you visit. See “How long we keep things”.

When you create an account and sign in

You can sign in with an email link or with Google.

  • Your email address. It's your account, and it's where your sign-in links and alerts go.
  • With Google sign-in: Google sends us your name, email address and a link to your profile picture, plus the sign-in details that link your Google account to ours. We don't get your Google password.
  • Your name, if you give it. After you first sign in we ask what to call you. It's optional, and you can skip it.
  • Your saved beaches (up to 3, or 5 with Premium), so My Beaches can show them.
  • Your email settings: whether hazard alerts and the weekly email are on.
  • “Tell me when you cover it” requests: when you ask us to cover a beach, we keep your account and the beach you asked for.
  • A sign-in record (a session), so you stay signed in on that device.
  • A record of the alert and weekly emails we've sent you (which email, when, and whether it went), so we never send you the same one twice. This record doesn't hold your email address.

When you subscribe to Epic Beach Days Premium

Payments are handled by Stripe. You type your card details into Stripe's own secure checkout, shown inside our page. We never see or store your card number. We keep:

  • your Stripe customer number and subscription number;
  • your plan (monthly or annual), whether it's active, and when the current period ends or renews.

When you contact us

The contact form sends one email to our support inbox with your topic, your message, your email address (so we can reply) and, if you picked one, the beach it's about. If you're signed in, it also includes your account number, and we send you an automatic reply. We don't save the message or your address on our website's systems. The email itself stays in our support inbox (see “How long we keep things”).

To stop abuse

To stop people flooding our forms, we keep scrambled versions of a few things for a short time:

  • The contact form: a scrambled version of your IP address.
  • Sign-in links: when you ask for a sign-in link, a scrambled version of your email address and of your IP address.
  • Deleting your account: a scrambled version of your account number when you try to delete it.

“Scrambled” means they're turned into a code that can't be turned back into the original. We can only check whether the same address or IP comes up again. These are kept up to 2 days, then deleted.

Things that stay on your device

  • “Snap a beach day” photos. The photo and its frame are made on your phone or computer. Photos are stamped on your device and never uploaded.
  • Your map app choice. When you pick Apple Maps, Google Maps or Waze for Directions, we remember it in your browser's storage (ebd_map_app) so you aren't asked every time. It stays on that device and is never sent to us.
  • Your sign-in address, while you wait for the link. When you ask for a sign-in link, your browser tab keeps the address you typed (ebd_signin_email) and the page you were on (ebd_signin_return), so the next page can show where we sent the link. They stay on that device and are cleared when you close the tab.
  • The tour hint. When you dismiss the tour's “More below” hint, your browser remembers it (ebd-tour-hint-seen). It stays on that device.

Cookies

We use a small number of cookies, and none of them is for advertising or tracking:

Cookieebd_welcomedWhat it's forRemembers that you've closed the first-visit welcome screen, so it doesn't show again. Our server reads it only to decide whether to show the screen.How long1 year
Cookieauthjs.session-tokenWhat it's forKeeps you signed in.How long30 days, renewed when you use the site
Cookieauthjs.csrf-token, authjs.callback-urlWhat it's forProtect the sign-in from forgery, and remember which page to bring you back to.How longUntil you close your browser
Cookieauthjs.pkce.code_verifier, authjs.stateWhat it's forOnly while you sign in with Google: they protect that sign-in.How long15 minutes

On our live site the sign-in cookies' names start with __Secure- or __Host-, which tells your browser to send them only over a secure connection.

Stripe, our payment provider, uses cookies to prevent fraud. When you open the checkout on our upgrade page, some of Stripe's fraud-prevention cookies can be stored on our site, as well as on Stripe's. They're covered by Stripe's cookie policy (opens in a new tab).

The emails we send

  • Sign-in links, when you ask for one. Each link works for 24 hours.
  • Hazard alerts: if you're signed in, we email you when red tide or a high rip current risk starts at one of your saved beaches. They're on by default for every account, free or Premium. Turn them off with the switch on My Beaches or the unsubscribe link in any alert.
  • The weekly email (Premium only): a Thursday email about the weekend at your saved beaches. It's on by default for Premium members. Turn it off with the switch on My Beaches or the unsubscribe link in the email.
  • A reply to your message, if you contact us while signed in.

We don't send marketing emails.

Who else sees your information

We use a few services to run Epic Beach Days. Each gets only what it needs:

ServiceVercel (USA)What it does for usHosts the website and runs it.What it getsEvery visit's IP address, browser type and page. Our own records pass through it.
ServiceNeon (USA)What it does for usOur database.What it getsEverything in "What we collect" above that we keep.
ServiceResendWhat it does for usSends our emails.What it getsYour email address and the content of each email we send you (sign-in links, alerts, the weekly email, replies), and the contact-form email to our inbox.
ServiceGoogleWhat it does for usSign-in with Google, if you choose it. Our support inbox is Google Workspace (Gmail).What it getsWith Google sign-in, Google knows you signed in to us. The support inbox holds the messages you send us.
ServiceStripeWhat it does for usTakes payments for Premium.What it getsYour email address and account number when you start checkout, your card and billing details (typed straight into Stripe's checkout), and your subscription.
ServiceSentry (USA)What it does for usTells us when something breaks.What it getsWhen something breaks, an error report goes to Sentry, our error-monitoring service in the US. It holds the error and the page, never your email, cookies or what you typed, and it doesn't store your IP address.

Weather, tide and hazard data. We get forecasts and conditions from Open-Meteo, NOAA, the National Weather Service and the Florida Fish and Wildlife Conservation Commission (FWC). We ask them about beaches, never about you: they get a beach's location and nothing about who's looking.

Directions and official pages. “Directions” opens Apple Maps, Google Maps or Waze with the beach's parking spot. Once it opens, that app's own privacy policy applies. We send them only the destination. The “Official page” link opens the city, county or state park website for that beach.

Where your information is kept. Our database is in the United States.

Fonts and images are served from our own site, so loading a page doesn't send your visit to a font or photo service.

We don't sell your information, and we don't share it for advertising. We'd only share it beyond the services above if the law required us to.

How long we keep things

WhatYour account (email, name, saved beaches, settings, requests)How longUntil you delete your account
WhatSign-in sessionsHow longRemoved by a daily cleanup once they expire (30 days after you last used the site)
WhatSign-in linksHow longRemoved by a daily cleanup once they expire (24 hours)
WhatThe record of alert and weekly emails sent to youHow long12 months, then deleted by a daily cleanup
WhatScrambled email, IP and account numbers (abuse protection)How longUp to 2 days
WhatSearches for beaches we don't coverHow longKept. They hold nothing about you
WhatMessages you send usHow longUp to 2 years in our support inbox, even after you delete your account
WhatOur database's backup historyHow long6 hours
WhatOur hosting provider's logsHow long1 day
WhatOur email provider's records of emails sentHow long30 days
WhatStripe's payment records (charges, invoices and the email on them)How longKept by Stripe after you delete your account, under Stripe's own rules

Deleting your account

You can delete your account yourself: open the Account menu and choose Delete account.

  • Your account, name, email address, saved beaches, email settings and “Tell me when you cover it” requests are deleted straight away, and our emails to you stop.
  • If you have Premium, your subscription ends right away and you won't be charged again. Deleting doesn't refund what you've already paid (see the Refunds section of our Terms). If you're asking about a refund, contact us before you delete.
  • Copies in our backup history, logs and email provider are gone within 30 days.
  • Two exceptions: messages you sent us stay in our support inbox for up to 2 years, and Stripe keeps its payment records.

If you sign in again later, you start with a new, empty account.

Your choices

  • Turn emails off with the switches on My Beaches or the unsubscribe link in any email.
  • Add or change your name: use “Add your name” (or “Change your name”, once you've set one) in the Account menu.
  • Get a copy or a correction of what we hold about you: email support@epicbeachdays.com and we'll handle it by hand.
  • Delete your account as above.

Children

Epic Beach Days is for people 13 and older. We don't knowingly collect information from children under 13. If you think a child under 13 has an account, email us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters, we'll tell signed-in users by email or on the site before it takes effect.

Contact

Epic Beach Days LLC, 30 North Gould Street, Ste N, Sheridan, WY 82801, USA
support@epicbeachdays.com