Last updated: 13 September 2026
The short version. Baitprint works without an account, keeping everything on your device. If you create one, your fishing log syncs to our database in the EU and stays private — nobody, including other Baitprint users, can see your catches or spots unless you explicitly choose to share them. We don't sell your data and we don't run advertising.
Baitprint is operated by MATEDRA, obrt za poslovno savjetovanje, edukacije i digitalne usluge, owner Dražen Eldić — a sole proprietorship (obrt) registered in Croatia at Ljudevita Rossia 33A, 47000 Karlovac, OIB 25386701111. We are the data controller for the personal data described here.
For any privacy question or to exercise your rights: info@baitprint.com.
Everything you enter stays in your browser's local storage on your device. We do not receive it, and we cannot see it. If you clear your browser data, it is gone — we hold no copy.
Two things still leave your device, because the forecast cannot work otherwise: the coordinates of the location you are viewing are sent to weather and map providers (see section 4). We do not attach any identity to those requests.
| Data | Why | Legal basis |
|---|---|---|
| Email address | To sign you in and send sign-in links | Contract |
| Name and profile picture (Google sign-in only) | Supplied by Google when you choose that sign-in method | Contract |
| Username you choose | So friends can find you | Contract |
| Fishing spots and their coordinates | To produce your forecast | Contract |
| Outings, including blanks: times, location, platform, bait, notes | The core of the product — the personal model is built from these | Contract |
| Catches: species, size, weight, bait, notes, time | Same | Contract |
| Photos you upload | To attach them to your catches | Contract |
| Tackle box entries and their visual signature | To match a lure photo against your own library | Contract |
| Checklists and unit preference | To keep your settings across devices | Contract |
| Alert settings, if you enable alerts | To decide when to notify you | Consent |
| When you snooze or turn off an alert | To tell whether we are sending too many | Legitimate interest |
| Counts of how far you got with the photo import | To tell whether it works on real phones | Legitimate interest |
We do not use analytics suites, tracking pixels, advertising identifiers, or third-party cookies. We do not build advertising profiles and we never sell personal data.
There are two exceptions, and both are worth stating plainly rather than hiding behind the sentence above. When you snooze an alert or turn one off, we record that you did — which spot, which of the two, and whether you tapped it in the email or on the notification. That is the only way we can tell whether we are sending too many alerts, and it is the specific failure that would make this app unwelcome. We record the action, not your attention: nothing logs that an alert was opened, read, or ignored, and nothing tracks what you do inside the app.
The second is the photo import. Your browser keeps a small set of running totals: how many times the import was offered and taken up, how many photos you selected, how many of them carried usable location and time information, how many outings were created, and whether that was enough to start your trial. They are totals on your own device, with no timestamps and no record of individual visits, so they cannot reconstruct a session. They exist because the import is only useful if real photos from real phones still carry the information it needs, and there is no other way to find that out. If you have an account they are stored on your profile; if you do not, they stay in your browser and are never sent anywhere.
Fishing spots are sensitive. Anglers do not share them lightly, and the app is built around that.
| Recipient | What they receive | Why |
|---|---|---|
| Supabase | Your account and all synced log data | Database, sign-in, and photo storage. Hosted in the EU. |
| Open-Meteo | Coordinates and dates you request a forecast or history for | Weather, wave and historical conditions data |
| OpenStreetMap | The map area you are viewing | Map tiles |
| Only if you choose Google sign-in — they confirm your identity to us | Authentication | |
| Facebook (Meta) | Only if you choose Facebook sign-in — they confirm your identity to us | Authentication |
| Anthropic | A catch photo, only when you ask the app to suggest the species in it | Suggesting the species shown in the photo |
| Google (Firebase Cloud Messaging) | A device token and the text of an alert, if you turn on alerts in the Android app | Delivering push notifications |
| Your browser's push service | A push subscription and the text of an alert, if you turn on alerts on the website | Delivering web push notifications |
| Our email delivery provider | Your email address and the text of an alert, when an alert is sent by email | Sending alert emails |
| Paddle | Payment and billing details, if you subscribe | Payment processing as merchant of record. We never see or store your card number. |
These providers act on our behalf or as independent controllers for the limited purpose above. None of them receive your fishing log for their own use. Some of them may process data outside the European Union; where they do, the transfer relies on the safeguards they provide under the GDPR.
Your log is kept for as long as your account exists, because it is the product — a forecast built from three years of your outings needs three years of your outings. Delete your account and the associated data is removed from our systems; section 6 explains how, and what is kept. Data held only on your device is under your control and is removed when you clear your browser storage.
You can delete your Baitprint account and its data at any time, in either of two ways.
What is deleted: your account and profile, saved spots, outings, catches and their photos, checklists, tackle box, alert settings and push subscriptions, community map contributions, and any catches you shared.
What is kept: if you subscribed, Paddle keeps its own record of your transactions, as the law requires of a merchant of record. Copies in our database provider's infrastructure backups remain for a limited period until they are overwritten. Data held only in the app on another device stays there until you clear it or uninstall the app.
Under the GDPR you may request access to your data, correction of it, deletion of it, a portable copy of it, restriction of how we use it, or object to a particular use. You can withdraw consent for alerts at any time, including via the one-tap unsubscribe link in every alert we send.
You do not have to ask us for the portable copy. The Log tab has an export that hands you everything on the spot: a JSON archive of every outing, catch and recorded hourly condition exactly as stored, and spreadsheets of your catches and outings. It works with no account and without our involvement, because a log you cannot get out of an app is a log you are renting.
To make a request, email info@baitprint.com. We will respond within one month. If you believe we have handled your data improperly, you may complain to the Croatian Personal Data Protection Agency (AZOP), or to the supervisory authority where you live.
Traffic is encrypted in transit. Access to your records is enforced by row-level rules in the database, so one account cannot read another's data even if the interface were bypassed. Photos are stored in a private per-account area and served only through short-lived signed links. No system is perfectly secure, and we do not claim otherwise.
Baitprint is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
If we change this policy in a way that materially affects you, we will say so in the app before the change takes effect. The date at the top always reflects the current version.
This policy may be offered in translation for your convenience. Where a translation differs from the English version, the English version governs. This does not affect any right you have under your own country's mandatory law to be given information in your own language. A Croatian translation is available at privacy.hr.html.