Privacy policy

Version: October 2026. This is an English translation; the German privacy policy is the legally binding version. In short: without your consent this site sets no cookies (except the technically necessary ones when you open the members area), counts page views only as totals without IP addresses (see “Visiting the site”) and does not load content from third-party servers on its own. Statistics (Google Analytics and our anonymous count, see “Counting without cookies”) only run with your consent; you load weather and water levels in the planner yourself at the tap of a button.

Controller

Finn Göpfert, c/o IP-Management #12373, Ludwig-Erhard-Str. 18, 20459 Hamburg, Germany, e-mail: hallo@pescaday.com.

Visiting the site

When you visit, the server processes technically necessary data, mainly IP address, date and time and the page requested. This is necessary to deliver the site and run it securely (Art. 6(1)(f) GDPR). To count page views, the web server writes a log without IP addresses: only time, page requested, browser identifier (to filter out bots), rough country (from Cloudflare) and the domain of the page you came from. From this we build hourly totals per day and page and then delete the raw lines; individual visitors cannot be identified, and nothing is stored on or read from your device (Art. 6(1)(f) GDPR, legitimate interest in measuring reach).

Hosting and Cloudflare

The site runs on a server of Hetzner Online GmbH (Falkenstein, Germany). In front of it sits a Cloudflare service that forwards requests and protects the site against attacks. Your IP address is transmitted to Cloudflare in the process (Art. 6(1)(f) GDPR). Cloudflare may store access data briefly according to its own rules.

E-mail contact

If you write to [email protected], the message is forwarded by Cloudflare e-mail routing to a mailbox of the controller. We process your address and the content only to reply to you (Art. 6(1)(f) GDPR) and delete the message once the request is settled.

Planner, catch log and shop search

The planner and catch log store your entries and photos only in your browser’s storage (localStorage and IndexedDB) on your device. Your browser also remembers there which “New at Pescaday” notice you have already seen (the date of the notice). This data is not transmitted to us or to third parties. You delete it by clearing the site data for pescaday.com in your browser. Photos are reduced in size on your device and embedded location data is removed. The fishing navigator (pescaday.com/app/ and the app) likewise remembers, only on your device, your chosen target fish and your last location rounded to about one kilometre, so that it shows the bite time straight away next time. “Locate again” replaces it.

If you share your location for sun times or the shop search, your browser asks for permission first. The location is used only on your device to calculate sun times or sort shops by distance and is not transmitted to us. In the planner it is stored locally, rounded to about one kilometre, so that the sun times are right on your next visit.

In the planner, after sharing your location, you can load the weather for your fishing day at the tap of a button. Only then does your browser send your location rounded to about one kilometre and the date to Bright Sky (api.brightsky.dev), an open service providing data of the German Weather Service (DWD). Bright Sky also receives your IP address for technical reasons (Art. 6(1)(a) GDPR, your consent by tapping). Without a tap no request is made. The same applies to the “Water levels nearby” button: then the rounded location and your IP address go to PEGELONLINE (pegelonline.wsv.de), the gauge service of the German Federal Waterways and Shipping Administration. If your location is in the USA, the planner instead loads the weather from the U.S. National Weather Service (api.weather.gov) and the tides of the nearest station from NOAA (api.tidesandcurrents.noaa.gov) at the tap of a button. For the weather the rounded location, for the tides only the station identifier, and in each case your IP address for technical reasons go to these US agencies, i.e. to the USA (Art. 6(1)(a) GDPR, your consent by tapping). The list of tide stations is stored on our server. On the fish species page the “My location” button sends the position rounded to 0.1 degrees (about 10 km) once to GBIF (api.gbif.org, Global Biodiversity Information Facility, secretariat in Copenhagen) to determine the state or country and the nearest sea; GBIF also receives your IP address for technical reasons (Art. 6(1)(a) GDPR, your consent by tapping). Without a tap no request is made. On the lake pages (pescaday.com/gewaesser/ and /en/lake-fishing/) this only happens when you tap “Load today’s bite times”: then the coordinates of the lake (not your location) and your IP address for technical reasons go to Bright Sky or, in the USA, to the National Weather Service (api.weather.gov).

The shop list comes from OpenStreetMap (© OpenStreetMap contributors, ODbL) and is stored on our server. Only when you tap “On the map” or a shop website do you open a third-party page, to which its own privacy notice applies.

Map

Your browser draws the map itself: the base map (Natural Earth, public domain) and all points (shops, fishing ponds, free fishing spots and club waters from OpenStreetMap, Berlin fishing waters from the open data of the Berlin Fisheries Office, gauging stations from PEGELONLINE) are stored on our server. No third-party map services are loaded. If you tap “My location”, your browser asks for permission first; the location is used only on your device (distances, sun times) and is neither transmitted nor stored.

The current water level of a gauge is only loaded by your browser when you tap “Load current water level” at the station, directly from PEGELONLINE (pegelonline.wsv.de) of the German Federal Waterways and Shipping Administration. Only the station identifier is transmitted, not your location; PEGELONLINE receives your IP address for technical reasons (Art. 6(1)(f) GDPR, legitimate interest in the display you asked for). The “Route” and “OpenStreetMap” links open a third-party page, to which its own privacy notice applies.

Members area (account)

If you create an account at pescaday.com/konto/, we store the username you choose, your password only as a secure hash (never in plain text), the date of registration and the catches, photos, waters and spots you enter yourself. We do not need an e-mail address. The purpose is that you can use your fishing log on all your devices (Art. 6(1)(b) GDPR, terms of use).

This data is private: only you can see it, we show none of it publicly and pass nothing on, unless you explicitly share a catch in the news feed (see below). If you leave the box “Count anonymously in the statistics” ticked for a catch, species and lure type are counted anonymously in statistics (see “Catches in the statistics”). Photos are stored without embedded metadata (for example GPS position). Videos of your catches (optional, up to 60 seconds, at most 5 per account) are also stored only for you: before that we clear the metadata in the video (for example recording location, device, recording time); the picture itself remains unchanged. Videos never appear in the news feed and are deleted with the catch or your account. Storage is on our server at Hetzner Online GmbH in Germany.

For logging in we set technically necessary cookies: “pd_s” keeps you logged in (up to 400 days, extended when you use the site, ends when you log out), “pd_csrf” protects forms against misuse (until you close the browser), “pd_lang” remembers the language. No consent is needed for this (Section 25(2) TDDDG). To protect against misuse we store login attempts briefly only as an encrypted check value of the IP address (at most 2 days).

Fishing desk: In the fishing desk of the app (pescaday.com/app/) we additionally store your target fish, your planned trips (destination, dates, note), for which spots you have switched on the bite alarm and for which target fish, and whether you have registered interest in Pescaday Plus. The catch rate per spot is calculated by the server from your own catches; only you can see it. Purpose and legal basis as above (Art. 6(1)(b) GDPR). With Perfect Drill you can save an offline package: your browser then stores the map around your spots, your desk data (spots, target fish, trips) and the forecast for the next days on your device (cache storage and localStorage) so that you can see them without a connection. This stays on the device; “Delete” in the desk removes it.

You can download your data at any time under “Account” as a table (CSV) or in full (JSON) and delete your account there yourself. We then immediately delete all catches, photos, spots and sessions.

Deactivation by us: If an account breaks our rules or is misused, we can deactivate it. Logging in is then no longer possible, all devices are logged out and we no longer send e-mails to the account. Catches, photos and spots remain stored until we reactivate the account or it is deleted; on request to [email protected] we hand over your data or delete the account. For this we only store the time of deactivation (Art. 6(1)(b) and (f) GDPR, protection of the portal and the other users).

You can optionally add an e-mail address to your account. We use it only for the confirmation link and “Forgot password”, never for advertising or newsletters. We send these e-mails via the service Brevo (Sendinblue SAS, Paris, France) as a processor (Art. 28 GDPR); Brevo receives your e-mail address and the content of the e-mail. Brevo technically counts whether an e-mail was opened; this count is set to anonymous on our side and is not attributed to any person. You can remove the e-mail address in your account at any time.

News feed: sharing catches voluntarily

When entering a catch you can optionally choose “Show this catch on the home page”. We then show publicly: your display name (or username), the area you specify (for example “Leipzig area”), species, length, month and year, lure, method, whether the fish was released, and the photo. Note, weight, weather, name of the water and exact date stay private. We only show an exact spot (rounded to about 100 m) if you explicitly choose this for that catch. Shared catches are also counted anonymously in the lure statistics (see “Catches in the statistics”).

Catches in the statistics (anonymous, can be switched off)

So that the lure tip and the bite forecast learn from real catches, we count catches together anonymously: shared catches and private catches for which “Count anonymously in the statistics” is ticked in the catch form. The box is ticked by default; you can untick it for any catch, also afterwards. Catches entered before 19.10.2026 only count if you tick the box when editing. Only species and lure type are counted (as a group such as “soft bait”, never your free text), and only for catches with their own spot, whose position is rounded to 0.1 degrees for this. Publicly we only show totals per species and lure type within a radius of at least 25 kilometres and only from 5 catches from at least 3 accounts. Name, spot, water, photo, note and exact date never appear. The legal basis is our legitimate interest in a better forecast for all users (Art. 6(1)(f) GDPR); you object by unticking the box, which takes effect immediately.

To check whether the bite forecast is right, our server recalculates the forecast index of the day of the catch for these catches at night. To do so it requests the weather values of that day from Bright Sky (api.brightsky.dev, data of the German Weather Service) for the position rounded to 0.1 degrees; Bright Sky only receives the day and rounded position, nothing about you. If the spot is in the USA, the server instead requests the wind from Open-Meteo (archive-api.open-meteo.com, weather data from ERA5 and the ECMWF model) and the tides of the nearest station from NOAA (api.tidesandcurrents.noaa.gov); these services also only receive the period and rounded position or the station identifier, nothing about you. We store the result (day, rounded position, index) with the catch. It is only evaluated internally as a total per forecast level, without person and without spot. For comparison the server rates all days of the same month at the same rounded position once; for this Bright Sky (in the USA Open-Meteo and NOAA) only receives the period and rounded position. Of this we only store how many days fell on each forecast level (month, rounded position, number), with no link to you or your catch; if no statistics catch falls into that month and position any more, we delete the count the following night. If you untick the box, withdraw the sharing or delete the catch or your account, the catch stops counting immediately; we delete the stored result at the latest the following night, immediately when the catch is deleted.

Before sharing, we automatically check photo and details against our rules (relation to fish or fishing, no nudity or violence, no hate, no advertising or contact details). For this, photo, display name, area, species, lure and method are transmitted to Anthropic (Claude, USA); you allow this with the box (Art. 6(1)(a) GDPR, transfer to a third country based on your consent and the provider’s standard contractual clauses). If everything is fine, the catch appears immediately; otherwise it stays private and you see the reason in your catch list. We can remove shared catches from the news feed at any time.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time: untick the box for the catch, delete the catch or delete your account. The catch then disappears from the news feed immediately. Please only share your own photos and no photos in which other people can be recognised.

Counting without cookies: which features are used (only with consent)

So that we can see which features are used and what to develop, Pescaday counts, after your consent in the notice at the bottom, how often pages are viewed and certain features are used, for example “planner started”, “catch saved” or “account created”. For this your browser only sends the name of the action to our server, and the server increases a counter for the day. Only date, name of the action and number are stored. No cookie is set, nothing is stored on your device, and no IP address, identifier or history is stored; no conclusion about you is possible. The server only receives the IP address for technical reasons as with every request (see “Visiting the site”). We delete the daily figures after at most 400 days. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Statistics settings” at the bottom of every page. Without your consent the site counts nothing, likewise if your browser sends the “Global Privacy Control” or “Do Not Track” signal. The only exception is what happens on the server in the account anyway: if you create an account or save something in it, the server itself increases a daily counter (only name of the action, date, number); nothing is read from your device.

App download and app starts

Users download the Pescaday app for Android directly from pescaday.com. When delivering the file, our server counts the download: only day, system (Android), type (“download”), the country our upstream service Cloudflare derives from the connection (for example “DE”) and the number are stored. No IP address, no identifier, no cookie. The legal basis is our legitimate interest in knowing how widely the app is used (Art. 6(1)(f) GDPR); no personal reference arises. Only with your consent (see “Counting without cookies” above) do we additionally count app starts and opening of the iPhone guide in the same way. The app only asks for your location when you tap the button, and it stays on your device. It only asks for permission for notifications when you tap “Notify me” (see next section).

Message when the bite time is good (push, only with account and consent)

In the quick finder (pescaday.com/app/ and in the app) you can tap “Notify me” after setting your location. This only works with an account and a confirmed e-mail address and only if you allow the request of your browser or phone. We then store with your account: the push address and the keys your browser creates for it, your spot rounded to 0.1 degrees (about 11 by 7 kilometres, never the exact location), language, time zone, date of sign-up and the day of the last message. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

In the evening our server calculates the bite time for the next day for the rounded spot. If you have spots with a bite alarm in the fishing desk, it calculates for these spots, also rounded to 0.1 degrees, and names the best spot in the message. For this it requests weather data from the German Weather Service via Bright Sky, in the USA from the National Weather Service and NOAA; these services only receive the rounded position, nothing about you. If the forecast is good, we send at most one message a day, and once a test message right after switching on. In the evening of the reported day we ask in this one message whether the fish were biting (see “Feedback”). Delivery is via the push service of your browser or system, for example Google (Chrome, Android), Apple (Safari, iPhone), Mozilla (Firefox) or Microsoft (Edge). The content is encrypted; the service only sees the push address, time and size. Google and Apple may transfer data to the USA; both are certified under the EU-US Data Privacy Framework.

You can switch it off at any time: in the quick finder with “Switch off”, under “Account” for all devices at once, or in the settings of your browser or phone. We then delete the entry immediately. If the push service reports that the push address no longer exists, we delete the entry automatically, also when your account is deleted. Your entries are included in the data export (JSON) under “Account”.

Feedback “Were they biting?”

Pescaday is free. To improve the bite forecast we occasionally ask whether it was right: in the app on the day after a forecast you viewed, and with a bite alarm also by message in the evening after a reported good day. First we ask whether you went fishing; only if yes, whether the fish were biting. Answering is optional; “Later” only asks again the next day. For the question the app only remembers on your device the day, the forecast index and the area rounded to 0.1 degrees. If you answer, we store the day, this rounded area (about 11 by 7 kilometres), the forecast index, your answer (“good bites”, “so-so”, “nothing”, “did not go”) and whether it came from the app or the message. No name, no account, no IP address. We only evaluate the answers in aggregate to see how often the forecast is right (Art. 6(1)(f) GDPR, legitimate interest in an accurate forecast; no personal reference arises).

Survey on Plus and Perfect Drill

In the app you can optionally answer a short survey: whether you would pay for more features, which ones matter to you, what amount per month and whether monthly or yearly. We only store your answers from the given options, the date, whether you were logged in (yes or no) and whether you answered in the app or the browser. We store no account, no IP address and no free text. So that nobody distorts the survey, the server remembers for at most two days an encrypted identifier of your network (a hash from which the IP cannot be recalculated) to allow at most three answers a day. On your device the app only remembers that you have already answered (localStorage “pd-umfrage”). The purpose is to decide which paid features we offer (legitimate interest, Art. 6(1)(f) GDPR).

Reach measurement with Google Analytics (only with consent)

If you choose “Accept” in the notice at the bottom of the page, the site loads Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google then records pseudonymously which pages you view, with which type of device, roughly from which region, and sets two cookies for this: “_ga” and “_ga_B775GDLS5J”, each with a storage period of 2 years. Google Signals and advertising features are switched off. According to Google, Google Analytics 4 does not store IP addresses. Event data is kept for at most 14 months.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Google may transfer data to the USA; Google is certified under the EU-US Data Privacy Framework. Without your consent Google Analytics is not loaded and no cookies are set. We store your decision with the date only in your browser (technically necessary, Section 25(2) no. 2 TDDDG) and ask again after 12 months. If you withdraw consent, the site deletes the Google cookies on your device. You can change it at any time: Change statistics settings (also at the bottom of every page).

Partner links (advertising links) and ads

Some links to shops, licence sellers, courses, guides and books are partner links and are labelled “Ad link” right at the link. Pescaday does not embed any partner scripts for this, sets no cookies and loads no partner tracking pixels. How often ad links are clicked is only counted with your statistics consent, without identifier and without IP address. For some partner links, which shops are shown depends on the country the shop delivers to: for this a small script only reads your browser’s time zone, evaluates it on your device and neither transmits nor stores it. Product cards with picture and price (for example under the target fish guides) come from the partners’ product data; pictures and prices are stored on our own server, and nothing is sent to retailers or networks when they are displayed. Only when you click an ad link does the link take you to the provider via the respective partner network; the network and the provider may set cookies to attribute a purchase or booking to the referral. Their privacy notices apply. Active partner networks: ADCELL (Firstlead GmbH), Awin, GetYourGuide, Viator (Tripadvisor).

Paying for Plus and Perfect Drill (Paddle)

You buy Plus and Perfect Drill through Paddle (Paddle.com Market Limited, 30 Old Bailey, London EC4M 7AU, United Kingdom). Paddle is the Merchant of Record: Paddle concludes the purchase contract with you, takes the payment, calculates the tax, issues the invoice and handles cancellations and refunds. The checkout only opens when you tap “Book”. There you enter your details directly with Paddle (for example e-mail address, country, postcode and payment details). Pescaday never sees card or account details. Paddle is itself responsible for this data; the Paddle privacy policy applies.

From Paddle we only receive what we need to unlock your account: Paddle customer and subscription ID, tier booked, period, status (active, cancelled, refunded), country, amount and the e-mail address you give Paddle. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We store this while the subscription runs and afterwards as long as tax and commercial law require (up to 10 years for accounting records, Art. 6(1)(c) GDPR), and delete the rest with your account.

Paddle is based in the United Kingdom. For the United Kingdom the EU Commission has found an adequate level of data protection (adequacy decision under Art. 45 GDPR). Other recipients are only our service providers named in this policy (hosting, Cloudflare, Brevo for e-mails), tax advisers where needed, and authorities where the law requires it.

Security: All connections to pescaday.com are encrypted (HTTPS), we store passwords only as a hash, and only the operator has access to the data.

Support via Ko-fi

The “Support” link leads to our page at Ko-fi (Ko-fi Labs Limited, United Kingdom). We embed nothing from Ko-fi in pescaday.com; only with the click do you leave our site, and Ko-fi’s privacy policy applies there. If you support us, Ko-fi processes the payment with the payment service you choose (PayPal or Stripe). We only see the amount and the details you enter there yourself.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), the right to withdraw consent at any time, and the right to lodge a complaint with a data protection supervisory authority. We reply within one month. Write to us at [email protected].