Privacy

Last updated: 30 August 2026

Dory is a social map of reef-fish sightings around Vanuatu. Its whole point is showing which sites people dive and where the fish are, so most of what you add is public by design. This page spells out exactly what that means.

What we store

  • Your account: an email address and a password, handled by our authentication provider (Supabase). Your email is never shown to other users and never appears on the map.
  • Your username and, if you set them, a display name and short bio. These are public.
  • Your sightings: a species, a point on the map, a date, and an optional note. Public unless you mark an individual sighting private.
  • Your Aquarium: the list of species you have collected.

What is public

A public sighting shows your username, the species, the location, the date and your note to anyone — including people without an account. Your profile page lists your public sightings and species count. Think of a public sighting as something you are posting, not a private logbook entry.

You can mark any sighting private when you log it. Private sightings are visible only to you.

For a small list of threatened species (sharks, rays, humphead wrasse, bumphead parrotfish, some groupers), the stored location is rounded to roughly two kilometres before it is saved, so a public sighting cannot be used as a poaching address. This rounding happens for everyone, including you.

Analytics

We count page views to understand which fish and pages people look at. This is done without cookies and without storing your IP address: each day a throwaway, salted fingerprint is derived from your IP and browser so repeat views can be grouped, and it cannot be linked back to you or across days. Aggregated view counts are kept for 180 days. You can opt out in your browser by setting localStorage key dory-stats-optout to 1.

Cookies

Only essential cookies, used to keep you signed in. No advertising or tracking cookies.

Deleting your data

You can delete your account from your settings. That permanently removes your profile, your sightings, and your Aquarium. You can also download a copy of your data there first. Aggregated analytics counts contain nothing that identifies you and are not affected.

Third parties

Hosting is provided by Vercel, and the database and authentication by Supabase. Map tiles are served by OpenStreetMap and Esri. Species names, descriptions and photos come from Wikipedia and Wikimedia Commons. We do not sell your data.

Contact

Questions, or something to report? Email choron.aurelien@gmail.com.