Who Is Responsible
The controller of the personal data processed on this website is IslandCat (Build Stuff Fast LLC), Registered Agents Inc, 30 N Gould St Ste R, Sheridan, WY 82801, USA.
Privacy contact: support@island.cat. We have not appointed a Data Protection Officer; the contact above handles privacy requests.
Representative
We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:
- European Union (EU)
- United Kingdom (UK)
Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/build-stuff-fast
What We Process
- Page requests: when your browser asks for a page, our hosting provider receives your internet address, your browser type, the page you asked for and the time. These are needed to deliver the page and to keep the site secure.
- Maps: on pages with a map, your browser loads the map images directly from MapTiler, which receives your internet address, your browser type and the address of this website.
- Usage statistics: as you use the site, your browser sends us the pages you view, the labelled buttons and links you tap (for example the island you choose), the page you came from, your browser type, whether your screen is phone sized, your language and a session code your browser keeps for that visit only. We also record your country, never your internet address. You can switch this off on a device at any time by opening https://island.cat/privacy/?no-analytics=1 on it.
- Island interest counts: we count, per day, how often each island is chosen and how often each upcoming island's page is opened. These counts identify no one.
- Launch sign-ups: if you ask us to tell you when an island's guide opens, we keep your email address, the island, your language and when you signed up and confirmed. We email you once to confirm the request and once when the guide opens. To stop misuse of the form, we also keep a coded form of your internet address for at most one day.
- Email: if you write to us, we receive your email address, your name if you give it, and your message.
- Settings on your device: the site keeps the islands you opened recently and your language choice in your browser's local storage, so the island list and the language suggestion work. They stay on your device, are never sent to us and can be cleared in your browser settings.
What We Do Not Do
- No accounts, no sign-in and no payments on this website.
- No cookies.
- No advertising trackers, no social media plugins and no fonts or images loaded from other websites (map images on map pages are the one exception, described above).
- We do not sell, rent or trade personal data.
Purposes And Legal Basis
We process page requests and map requests to deliver the website and keep it secure, usage statistics and island interest counts to learn which islands and features people use so we can decide what to build next, and email to answer you and follow up. The legal basis is our legitimate interest in running, securing and improving the website and in replying to people who contact us (GDPR Article 6(1)(f)). You can object to this processing at any time, and switch usage statistics off as described above.
Launch sign-ups are based on your consent (GDPR Article 6(1)(a)). You can withdraw it at any time with the link in our email or by writing to support@island.cat; this does not affect what we did before.
Recipients
- Netlify (United States): hosting and delivery of the website.
- Supabase (United States): the database and server functions that store usage statistics, interest counts and launch sign-ups.
- MapTiler (Switzerland): map images on pages with a map.
- Our email service providers: the support@island.cat mailbox, and sending the confirmation and launch emails.
International Transfers
Some of these providers operate outside the European Economic Area, notably in the United States. Where data is transferred outside the EEA, we rely on the European Commission's adequacy decisions or, where adequacy does not apply, on Standard Contractual Clauses together with appropriate supplementary measures. You can ask us for a copy of the relevant safeguards at support@island.cat.
How Long We Keep Data
- Page request logs: kept by our hosting provider for a short period under its own retention rules.
- Usage statistics: up to 100 days.
- Launch sign-ups: until we send the launch email, then deleted. A sign-up you do not confirm is deleted after 30 days. If you remove your address, we delete it at once and keep only a coded form of it so that we never email it again.
- The coded internet address used against misuse of the sign-up form: at most one day.
- Email: as long as needed to deal with your message and any follow-up, then deleted.
- Settings on your device: until you clear them in your browser.
Your Rights
- Access: ask whether we hold personal data about you and get a copy.
- Rectification: have inaccurate data corrected.
- Erasure: have your data deleted.
- Restriction: ask us to limit how we use your data in specific cases.
- Objection: object to processing based on our legitimate interests.
- Portability: receive data you gave us in a structured, machine-readable format.
- Complaint: complain to a data protection authority (see below).
To use these rights, write to support@island.cat or use our representative's portal above. We answer within one month; for complex requests this can be extended by up to two further months, and we will tell you if it is.
Complaints
You can complain to the data protection authority of the EU or UK country where you live or work, for example the Agencia Española de Protección de Datos (AEPD) in Spain or the Comissão Nacional de Proteção de Dados (CNPD) in Portugal.
Children
IslandCat is a travel guide for adults. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, write to support@island.cat and we will delete it.
Security
The website is served only over encrypted connections (HTTPS), and access to the support mailbox is restricted.
Changes To This Notice
We update this notice whenever what the website processes changes. The date at the top of the page shows the last update.