Privacy Policy

Version 1 · Last updated: 23 September 2026

portfolio.cruises is a free tool that lets you log the cruise ports, countries and ships you have visited, and mark the ones you want to see. This policy explains what personal data we process, why, and what rights you have.

1. Who is responsible

The controller for your personal data is:

Patric Huemmerich, trading as pat.cruises
Email: info@pat.cruises

For anything related to your data, write to the email address above.

2. Using the site without an account

You can use portfolio.cruises without creating an account. In that case, the ports and ships you tick are stored only in your own browser (local storage). They are not sent to us, and we cannot see them. Clearing your browser data deletes them.

This storage is strictly necessary to provide the function you requested, so it does not require consent.

Server logs. When you visit the site, our hosting providers automatically process technical data such as your IP address, date and time of access, the page requested and your browser type. We use this data only to deliver the site, keep it secure and fix errors. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). Log data is deleted by our providers after a short period.

3. Your account

If you create a free account, we process:

  • your email address
  • if you sign in with Google: your name, email address and profile picture as provided by Google
  • the ports and ships you mark as visited, sailed or wanted, with the date of each change
  • optional profile details you add: display name, home country, preferred language

We use this data to provide your account, save your portfolio across devices, and show your statistics and badges. Legal basis: performance of our agreement with you (Art. 6(1)(b) GDPR).

We keep your account data until you delete your account. You can do this at any time in your profile. Deletion removes your data from our active systems immediately and from backups within 30 days.

4. Cruise deals and tips by email (optional)

When you create an account, you can separately choose to receive cruise deals and tips from pat.cruises by email. This is optional, the box is not pre-ticked, and your account works the same either way.

If you opt in, we use your email address and the ports and ships on your wishlist to send you offers and tips that match your interests. For example, a deal on a cruise that visits ports you marked as "want to go".

We record when you gave your consent and which version of the consent text you agreed to, so we can prove it.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time, with effect for the future, via the unsubscribe link in every email or the toggle in your profile. Withdrawing consent does not affect your account.

5. Suggestions you send us

If you use "Suggest a missing port" or "Suggest a missing ship", we store what you submit and, if you are signed in, your user ID. We use this only to improve our data. Legal basis: our legitimate interest in maintaining accurate data (Art. 6(1)(f) GDPR). Please do not include personal information in suggestions.

6. Service providers

We use the following providers, who process data on our behalf under data processing agreements:

  • Lovable (Sweden): hosting of the website
  • Supabase (USA; database hosted in the EU): database and account login
  • Brevo (Sendinblue SAS, France): sending login and marketing emails
  • Google (Google Ireland Limited): only if you choose "Sign in with Google"

Where a provider may access data from outside the EU/EEA, the transfer is protected by the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

We do not sell your data. We do not use advertising or analytics trackers on this site.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you
  • have incorrect data corrected
  • have your data deleted
  • restrict how we process your data
  • receive your data in a portable format
  • object to processing based on our legitimate interests
  • withdraw your consent at any time

To exercise any of these rights, email info@pat.cruises.

You also have the right to lodge a complaint with a supervisory authority. In Malta this is the Information and Data Protection Commissioner (idpc.org.mt). You can also contact the authority in the EU country where you live.

8. Age

portfolio.cruises is not directed at children under 16. If you are under 16, please do not create an account.

9. Changes to this policy

If we change how we process your data, we will update this policy and change the version date above. If a change affects your consent, we will ask for it again.