Privacy
Updated 27 October 2026
WeSurf is here to make you want to get on the water, not to collect data about you. This page says exactly what we store, why, and how to get it deleted.
Who runs WeSurf
WeSurf is a hobby project run by Stephan Hjelmdal Nielsen, who is the data controller.
Questions about your data: write to hej@wesurf.dk.
What we store when you have an account
Your name and email. If you sign in with Google, also your Google ID and profile picture.
Your favourite spots, your alerts, your limits per sport and your language.
Passwords are never stored in plain text, only as a one-way hash.
Notifications on your phone
If you turn on notifications, we store the address your browser gives us at its push service (Google, Apple or Mozilla), so we can reach exactly your device. The message itself is encrypted.
While you have the app open, we briefly note that, so you don't get a push while you're already looking.
Your location
"Near me" uses your location in the browser to sort spots by distance. It is never sent to us and is not stored.
Cookies and local storage
We only use necessary cookies: your login session, a security token against forged forms, "remember me" and your language.
In your browser we remember light or dark mode, the selected map layer and sport.
No tracking, no ads, no analytics. That's why there is no cookie banner either.
Statistics
We count page views and visits to see how WeSurf is used: which page, whether you are on a phone or a computer, and which site you came from. This happens without cookies and without storing your IP address. A visit is only recognised by a random number that disappears when you close the tab. The numbers are deleted after 13 months.
Who helps us
Vercel serves the site. Our web host runs the server and the database. Cloudflare handles the domain.
Google, if you sign in with Google, and the push services above, if you turn on notifications.
The map is loaded from OpenFreeMap directly in your browser, so they see your IP address, like any other website you visit.
Weather comes from DMI and yr and contains no information about you.
How long
For as long as you have your account. If you delete it, everything that belongs to it is gone immediately.
Technical log files are deleted after 14 days.
Your rights
You can see, correct, export and delete your data. You delete your account yourself under Account.
If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (datatilsynet.dk).