Last updated: June 2026

This policy explains what we collect, why we collect it, and what we do with it. We do not sell your information. We do not run third-party ad tech beyond standard hosting analytics.

What we collect

Anonymous browsing. When you visit any page, our hosting provider (Cloudflare) logs your IP address, user agent, country, and request path for the purpose of serving content and blocking abuse. These logs are retained per Cloudflare's default policies.

Account data, only if you sign in. If you create an account on /profile, we store:

• Your email address (used to deliver the magic-link sign-in).
• Profile fields you enter: display name, diver rating, certifications, home dive area, bio.
• Avatar image, if you upload one.
• The date and version of the liability waiver you acknowledged.
• Any planner state or checklist you choose to save (Nitrox plans, deco plans, gas plans, weight plans, CCR checklists, dive notes), including the optional dive metadata you attach (date, site, boat, buddy, free-text notes).

Forms you submit. If you submit a contact form, decal request, or partnership inquiry, we receive whatever you enter on that form.

Click telemetry. When you click a dive-shop or operator link on a conditions page, we may log an anonymous count of clicks to that destination in our key-value store. We do not record who clicked.

Where it's stored

Account and saved data lives in a hosted Supabase project running on AWS US-East. Every row is protected by row-level security: only the row's owner (you) can read, update, or delete it. The client-side credentials embedded in the site allow only authenticated access scoped to your own data. Avatar images live in a public Supabase Storage bucket scoped to a per-user folder.

How we use it

• Show you your saved plans, checklists, and library.
• Send you the one-time sign-in link you requested.
• Operate, maintain, and debug the site.
• Aggregate anonymous traffic and click counts to understand what's useful.

We do not sell your data, share it with advertisers, or use it to train any model.

Third-party services

The site links to dive shops, dive operators, manufacturers, and live webcam feeds operated by others. Their privacy practices are not ours. Review their policies separately. Affiliate links are disclosed inline and where applicable carry a rel="sponsored" attribute.

Cookies and local storage

We use local storage (not cookies) to keep you signed in once you've authenticated. The key is sd-auth. Clearing your browser's site data signs you out everywhere.

Your rights

You can edit or delete any profile field, any saved plan, or any avatar at any time through /profile and /library. You can delete your entire account by emailing dm@orior.ai; we will erase your row from sd_profiles, every row of yours in sd_saved_artifacts, and any avatar file you uploaded.

Children

Stoic Diver is not intended for users under 18. The liability waiver acknowledged at sign-up requires the user to be 18 or older.

Changes

If we materially change what we collect or how we use it, we will update this page and bump the date above. For changes that affect already-signed accounts, you will be re-prompted on next sign-in.

Contact

Email dm@orior.ai.