Privacy Policy
What we store, if you create an account
Everything in TexCast Fishing works on your device without an account. If you choose to sign in, we store only what each feature needs:
- Email address — to sign you in and, if you enable them, send alerts.
- Synced waters, settings and catches — My Waters, appearance/tackle/craft preferences, and your catch log, so they carry over across devices.
- Alert rules — the trout-stocking and conditions alerts you've turned on.
- Push subscriptions — the endpoint your browser gives us so we can deliver a push alert you asked for. Not usable by us for anything else.
Sign in with Google
Signing in with Google is optional; you can use an emailed sign-in code instead. We request only the openid and email scopes. We receive your email address, whether Google has verified it, and a Google account ID.
We use this only to sign you in and link your account. It is not used for ads, not sold, and not shared except with processors that run the service (see below). It is stored until you delete your account (Settings → Account → Delete).
TexCast Fishing's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we don't store
- Your name
- A continuous location history
- Ads or ad-tracking of any kind
We never sell your data, to anyone, for any reason.
Opt-in only
An exact catch location (map pin) is only stored if you turn sync on for that catch and choose to share its location — it's private by default, even with an account. Push and email alerts are also off unless you turn them on.
Who processes this data
Cloudflare hosts the app and stores account data (database and file storage). Resend delivers sign-in code and alert emails. Google is a sign-in provider if you choose "Sign in with Google". None of them uses your data for anything beyond providing TexCast Fishing.
Cookies
We set one cookie: a sign-in session cookie, and only if you sign in. There are no advertising or tracking cookies. Cloudflare Web Analytics is cookieless.
Push notifications
Push alerts are off until you turn them on. If you do, your browser gives us a push endpoint that we use only to deliver the alerts you asked for. Turn them off in Settings or in your browser at any time.
Retention
- Sign-in codes and sessions are deleted automatically once they expire.
- Rate-limit counters (anti-abuse bookkeeping) are deleted after 1 day.
- Alert delivery logs are kept for 90 days, then deleted.
This runs as a daily automated purge — no one has to ask.
Delete or export your data
From Settings → Account, "Export my data" downloads every row we have for you as a single file; "Delete my account" permanently removes every row tied to your account. Both are available at any time, with no waiting period.
Children
TexCast Fishing is not directed to children under 13, and we do not knowingly collect information from them.
Security
Data is sent over HTTPS and stored with Cloudflare. Sign-in codes expire quickly and your session lives in an HttpOnly cookie. No system is perfectly secure, which is one reason we collect so little.
Changes
If this policy changes, we will update this page and the effective date below.
Effective date
This policy is effective September 29, 2026.
Questions
Contact [email protected].
← Back to TexCast Fishing