Privacy Policy

Effective 14 July 2026

This policy explains how QUIVRR collects, uses and shares information when you use quivrr.app, quivrr.surf and related QUIVRR services.

Information we collect

• Account and identity: authentication identifier, email address, display name and sign-in/session information supplied through Microsoft Entra External ID.
• Rider profile: details you choose to provide, such as region, ability, volume preferences, goals, home break, preferred brands, current boards and quiver information.
• Saved activity: saved boards, searches, comparison choices and other account features.
• Bodhi: messages you send, conversation context, recommendations and feedback needed to provide the surfboard assistant.
• Technical information: IP address, approximate region, device and browser details, requested pages, referral information, timestamps, response status, diagnostics, security events and API logs.
• Local browser data: authentication state, theme, region, chat state, analytics choice and preferences stored using cookies, local storage or session storage.
• Native app profile photo: if you choose Take photo or Gallery in the Quivrr Android app, the selected image is stored only in the app’s private storage on that device. QUIVRR does not upload it to its servers.
• Advertising data: Google and its partners may receive device identifiers, IP address, page URL, browser information, cookie data and ad interaction information when advertising services load.
• Retailer interactions: QUIVRR records search and availability requests; a retailer receives information under its own policy when you follow an external retailer link.

Website analytics and operational logs

QUIVRR uses Azure Static Web Apps HTTP diagnostics to understand aggregate traffic, maintain security and diagnose delivery failures. These operational records may include the requested path, timestamp, response status, browser or device information and client network information.

If you select Allow analytics, Microsoft Azure Application Insights also records a random browser and session identifier, page path without query strings or fragments, approximate region, browser/device type, performance information and errors. QUIVRR does not intentionally send your email, rider profile, search terms, Bodhi messages or full authenticated identity to browser analytics.

How we use information

QUIVRR uses information to authenticate accounts; provide profiles, saved boards and quivers; personalise Bodhi; search catalogues and regional availability; maintain security; diagnose failures; improve services; measure aggregate usage; comply with law; and fund the service through advertising.

Advertising, analytics, cookies and consent

QUIVRR uses Google AdSense. Google may use cookies or similar technologies to deliver, measure and personalise ads, prevent fraud and limit repeated ads. Learn how Google uses information from sites that use its services and manage ad personalisation in Google Ads Settings. Where required, QUIVRR uses a Google-certified consent platform so you can accept, reject or manage advertising purposes.

Optional Application Insights browser analytics remains off unless you allow it. You can change that choice at any time.

Analytics settings Advertising privacy settings

When information is shared

Information may be processed by service providers that operate QUIVRR, including Microsoft Azure, Azure Monitor, Application Insights and Entra for hosting, telemetry and identity; Azure OpenAI/OpenAI services for Bodhi; Google for advertising; and technical providers supporting security and delivery. QUIVRR may also disclose information when required by law, to protect users and the service, or as part of a business reorganisation. QUIVRR does not sell personal information for money. Advertising-related disclosure may be treated as a “sale” or “sharing” under some laws; available consent and opt-out controls apply.

Retention and security

Website request diagnostics and browser analytics are normally retained for up to 30 days in the current production monitoring workspace. Other information is kept only for as long as reasonably needed for account operation, security, dispute resolution and legal obligations. Reasonable technical and organisational safeguards are used, but no online service is completely secure.

Your choices and rights

You can edit supported profile fields, remove saved items, sign out, manage browser storage, analytics and advertising choices, or request access, correction or deletion where applicable. Browser settings can block cookies, although authentication and saved preferences may then work differently. You can request deletion of your My Quivrr account and associated data through QUIVRR’s public account-deletion pathway.

International processing and children

Information may be processed in countries other than your own, subject to applicable safeguards. QUIVRR is not directed to children under 13 and does not knowingly collect their personal information.

Changes

QUIVRR may update this policy as services or legal requirements change. The effective date above identifies the latest version.