Last updated: August 13, 2026. (Adds the optional account & sync service and the floateers.cc website; the app without an account is unchanged.)
Floateers is built to be privacy-respecting by design. This page describes exactly what data the Floateers apps and the floateers.cc website touch, where it goes, and how long it stays around.
Nothing. Floateers has no analytics, no crash-reporting SDK, no advertising libraries, and no tracking. Without an account, we never see your data — there is nowhere for it to go.
Everything Floateers works with lives locally — in a single file on your phone, or in your browser's own storage on floateers.cc:
While a recording is running, the app also keeps a working copy of it on your phone's disk, so a dead battery does not lose the outing; it is removed when you save or discard the recording. This data never leaves your device except through actions you take yourself (see below). It is included in your normal device backups like any app data. If you uninstall Floateers or clear your browser's site data, it is gone. This local copy is always the primary one — an account (below) only mirrors it.
The app asks for location permission ("while using the app") the first time you record an outing, and uses it for two things:
When you save a recording, the app asks your phone's built-in geocoding service (Apple on iPhone, Google on Android) for the name of the place where it started, to suggest a name like "2026-07-24 - Otelfingen". That request contains the starting coordinates and nothing else, and you can overwrite the name. Without an account, Floateers never uploads your location history anywhere; with one, it goes only to your own account's synced library, described below.
The optional watch companion is a display for your wrist: the phone sends it your position, the tiles and paths around you, and your outing's statistics over Apple's device-to-device channel. That data moves only between your own devices and is not stored on the watch beyond what is on screen.
About the Health permission. Starting a recording opens the watch app automatically. The only mechanism Apple offers for that is a workout session, which requires Health permission — Floateers uses it solely for this. The app reads no health data, writes none, and saves no workouts; nothing from Floateers appears in the Health app.
You never need an account: everything above works without one, forever. Creating one is a choice, for people who want their Floateers map to be the same everywhere. An account currently gives you:
Signing in uses email links only — there are no passwords. When you request a sign-in link we store a one-time token (hashed) that expires after 15 minutes, and email you the link. Sign-in emails are the only emails we send; there is no newsletter and no marketing.
What an account stores on our servers:
Where: on Cloudflare infrastructure with storage pinned to the European Union jurisdiction. Sign-in emails are delivered via Resend from an EU region (Ireland). These two are our only processors: Cloudflare (hosting, API, database) and Resend (sign-in email delivery, which necessarily processes your email address).
Retention and deletion: account data is kept until you delete the account, which you can do in the app (Account screen) or on floateers.cc — it takes effect immediately and erases the account, its email address, its sessions and the entire synced library from our servers. Your data leaves when you do: in future club and team features, deleting your account also removes your rides from any team views (only anonymous aggregates, such as a team's tile count, may remain). Deletion never touches the copies on your own devices — those are yours, and you can keep using Floateers without an account or create a new one later.
Legal basis (GDPR art. 6(1)(b)): we process this data to provide the sync service you signed up for — nothing else is done with it. No profiling, no advertising, no selling or sharing of personal data, ever.
You can share a single ride as a public link — with or without an account. A share is a snapshot of that one ride (path, timing, statistics, tiles) with no name, email or other identity attached. Anyone with the link can view it, so treat the link accordingly. Shares expire after 90 days, and you can stop one at any time from the device that created it; stopping or expiry deletes it from our servers.
The apps and website talk to these outside services, and to none other:
Floateers attaches no identifiers of its own to any of these beyond your account session where one exists, and makes no other network requests. Map data © OpenStreetMap contributors.
The website follows the same rules as the app: no analytics, no advertising, no tracking cookies. It uses your browser's local storage only for the app-like things it does — your library, settings, map position, and (if you sign in) your session. Our hosting providers may set strictly technical cookies needed to serve the site securely.
Under the GDPR and the Swiss FADP you have the right to access, correct, export and erase your personal data. In Floateers these are buttons, not correspondence: your data is visible and editable in the apps, the export button gives you a complete copy, and account deletion erases everything we hold. For anything else — or if you believe we handle your data incorrectly — contact us below; you also have the right to complain to your data-protection authority.
Floateers is not directed at children under 13, and accounts are not intended for them.
If we change what data Floateers handles, we'll update this page and the "Last updated" date above. Substantive changes will be flagged in the app's release notes.
Data controller: Jeroen Houttuin / SUPzero, Switzerland.
Questions about this policy or your data: support@supzero.ch