Skip to content
SwimmablehomeFind a swim

Privacy policy

Last updated: 23 September 2026

We want you to check a swim spot without being tracked. This policy explains what the Swimmable website and API collect, why, and what you can ask us to do with it.

1. What the website collects

  • Server logs. Like any website, our servers record requests (IP address, browser user agent, the page requested and the time) to keep the service running and secure.
  • Spot page views. When you open a spot page we count one view for that spot. The count is not linked to you: no cookie, account or identifier is stored.
  • Your location, only if you ask. “Near me” uses your browser's location permission. The position is rounded to about a kilometre, used to find nearby spots, and not stored.
  • Cookieless usage analytics. On swimmable.app we run our own, self-hosted instance of Umami, an open-source analytics tool. It records page views without the query string, and a few anonymous events: searches (the first 60 characters of what you typed, lowercased), which spot pages are opened, shares, widget-code copies, map and filter use, and page-speed measurements. It sets no cookies and stores no IP address or persistent identifier; your IP address is only used to derive a country and a daily, anonymous visit count. Your location is never sent to it.
  • No accounts, tracking cookies or ad trackers. The website does not set tracking cookies or load advertising scripts.

2. Swim alert emails

If you set a swim alert on a spot page, we store your email address, the alerts you chose (spot, Good or Glass threshold, swim window and days), when you signed up and confirmed, the language your browser prefers, your browser's user agent, and a keyed hash of your IP address (never the address itself) to stop abuse. We also log each alert email we send (spot, date, score, send status).

  • We use this only to send the alerts you asked for: one confirmation email, then at most one email per spot per day and at most three a day in total. No newsletters or marketing.
  • Nothing is sent until you click the link in the confirmation email. Requests that aren't confirmed within 7 days are deleted.
  • Links in our emails carry a random code, never your address. Every alert email has a one-click unsubscribe link and a link to manage or delete individual alerts.
  • When you unsubscribe we delete your alerts, your IP hash and user agent, and keep only your address marked as unsubscribed so we don't email it again. To have it removed completely, write to privacy@swimmable.app.
  • Emails are delivered by our email provider (Resend), which processes your address and the message to send it.

3. Third parties your browser talks to

  • Map tiles come from OpenFreeMap, which receives your IP address when the map loads.
  • The analytics script and its events are served by our own Umami server, which receives your IP address and browser user agent as described above.
  • Pages you embed the Swimmable widget on load it from swimmable.app.
  • If you set a swim alert, our email provider (Resend) receives your email address and the email we send you.

4. The API

If you use the API, we keep your key, your contact details and request logs (endpoint, time, response status) to operate the service, enforce rate limits and prevent abuse. API request logs are typically kept for up to one year.

The MCP server

The MCP server at mcp.swimmable.app lets AI assistants read Swimmable data. It has no accounts. To share the free quota fairly it keeps, in memory only, a count of tool calls per IP address that resets every 10 minutes, and a 5-minute cache of answers keyed by the question (spot or coordinates), not by who asked. Its logs record the tool used, the time taken and the spot or coordinates rounded to about a kilometre; they do not include your IP address or the text you typed. Your assistant's provider handles your conversation under its own privacy terms.

5. Sharing

We do not sell, trade or rent personal information. We share it only with providers that host and run the service for us, when the law requires it, or as part of a merger or sale of the business.

6. Your rights

You can ask to access, correct, export or delete personal information we hold about you, and withdraw consent where we rely on it. Write to privacy@swimmable.app; we reply within 30 days.

7. Children

The service is not directed to children under 13 and we do not knowingly collect their personal information.

8. International transfers

Data may be processed in countries other than yours, with appropriate safeguards under applicable privacy law.

9. Changes

We will update this page when our practices change and change the date at the top.