Legal

Privacy Policy

Last updated September 2026

This policy covers the Ostro app, this website (ostrosailing.com) and the public results pages we host for clubs. All of them are provided by Studio Seol, which is responsible for them and for the information described here.

Using the app on your device

The app lets you record what you need to run a race: boat names, sail numbers, helm names, ratings, notes, race times and results. This is stored on your device, in the app’s local database, and is not sent to us unless you choose to publish a race (see below). Timing never depends on a connection, and you can use the app this way without ever signing in.

Data kept on your device is under your control. Deleting the app removes it, and it is included in your device’s own backups (for example iCloud or Google device backup) according to your device settings, not by us.

When you export or share results as text or a CSV file, your device’s standard share functions send them wherever you direct, such as a messaging app, email or a file. Ostro is not involved once you have shared.

Publishing results for a club

Publishing is an optional feature for clubs and the people who run their racing. To use it, you sign in and set up or join a club. When you publish a race, its results are uploaded to our servers and shown on a public results page.

Your account. You sign in with Apple or Google. We receive an account identifier and the name and email address that provider shares with us (Apple lets you hide your real email address). We also store which clubs you belong to and your role in each, such as owner or race officer.

Club details. The club’s name, location, badge or burgee, fleets, classes, handicap schemes and series.

Published results. For each race you publish: boat names, sail numbers, classes, ratings, start and finish times, corrected times and positions. Results are listed by boat and sail number. Anyone with the link can view a results page without signing in, and pages can be found by search engines, in the same way clubs have always posted results on a noticeboard or website.

The club decides what it publishes, and we host and display it on the club’s behalf. If a club includes a person’s name in its results, the club is responsible for being entitled to do so. Anyone who wants their name removed from a published result can ask the club, or email us and we will remove it.

Why we use your information

We use account and club information to let you sign in, manage your club and publish results, which is the service you have asked for. We also rely on our legitimate interests to keep the service secure and working, and to host club results, which are public by tradition. We contact you only about your account or the service, never for marketing unless you have agreed to it.

Who we share it with

We do not sell your data or use it for advertising. We share it only with service providers who run parts of the service for us: Supabase, which hosts our database and account sign-in; Cloudflare, which hosts this website and the results pages; Apple and Google for sign-in; and our email provider. They may use it only to provide their service to us, under contracts that require them to protect it to at least the standard set out in this policy. We may also disclose information if the law requires it.

Where it is stored

Account, club and results data is stored in Supabase’s London data centre. Some of our providers, including Supabase and Cloudflare, are based in or have staff in other countries, such as the US, and may access information from there to run their service. Where that happens, it is protected by approved safeguards: for UK users, the UK-US data bridge or the UK International Data Transfer Agreement; for users in Ireland and elsewhere in the EU, the EU-US Data Privacy Framework or the EU Standard Contractual Clauses.

How long we keep it, and deleting it

We keep your account for as long as you have it. You can delete your account at any time from within the app, or by following the steps on our account deletion page. When you do, we delete your account details and club roles within 30 days, and they are cleared from our backups within a further 90 days.

Published results belong to the club’s record, not to the person who published them, so they stay published after you leave or delete your account, until the club removes them. A club owner can remove published races or the club itself at any time, and we delete the underlying data within 30 days of that.

Data kept only on your device is never held by us, so there is nothing for us to delete. Deleting the app removes it.

How we protect it

Information sent between the app and our servers is encrypted in transit. Access to account and club data is limited to the people who need it to run the service, and it is stored with established hosting providers. Published results are public by design, so please publish only what your club is happy to share.

Your rights

Under UK and EU data protection law you can ask to see the information we hold about you, and to correct it, delete it, restrict or object to how we use it, or receive a copy to take elsewhere. Email hello@studioseol.com and we will respond within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk), or, if you live in Ireland or elsewhere in the EU, to your local data protection authority (in Ireland, the Data Protection Commission, dataprotection.ie).

Apple Watch

If a future Apple Watch companion is used, it communicates only with your paired iPhone over Apple’s device-to-device connection. No race data is sent to us from the watch.

Analytics, tracking and advertising

There are none. The app, this website and the results pages contain no analytics, advertising or third-party tracking code, and do not use cookies or device identifiers for tracking.

This website and results pages

This website is a set of static pages hosted by Cloudflare. Like any web host, our hosting providers process your IP address and basic request details, such as the page requested and your browser type, to deliver pages and protect them against abuse, and keep server logs of these for a limited period. The site sets no cookies. Everything it shows, including its fonts, is served from this site alone, so your visit is not shared with any other third party.

If you email us

If you contact us by email, we receive your email address and whatever you include in your message. We use it only to reply and help with your question, and keep it only as long as that takes. You can ask us to delete it at any time by emailing hello@studioseol.com.

Children’s privacy

Ostro is a general-audience sailing tool, and club accounts are intended for adults who run racing for a club. Results are listed by boat, not by person. If a junior sailor’s name appears in a published result, a parent or guardian can ask the club or us to remove it.

Changes to this policy

We plan to add more features over time, such as letting sailors follow a club and be notified when its results are published. We may also give you the option to contribute anonymised race data, such as boat class and elapsed and corrected times, to build fleet-wide averages that make handicaps fairer for everyone; if we do, it will be your choice to switch on, never something we take without asking. Before any new feature that changes what we collect is released, this policy will be updated to describe exactly what is collected, why, how long it is kept and your rights over it, and the “last updated” date above will change.

Contact

Questions about this policy? Email hello@studioseol.com.