Maintained by Pablo Ruiz Quintero. Last reviewed . Everything below was checked against the source code of this site on that date, not copied from a generator.
Most privacy pages are written to cover the site, not to inform the reader, which is why they list things the site does not do and omit the one script that it does. This one is the other way round. It names the single third-party script that runs here, the exact columns the catch form writes, the country the database sits in, and the parts of the internet your browser never contacts while reading a report.
The short version
There are no accounts on this site, so there is nothing to log in to and no profile to build. There is no advertising, no newsletter, no comment system and no social widget. Nothing here is sold or shared with a data broker. Two things collect anything at all: Google Analytics, on every page, and the catch report form, only if you choose to fill it in. Both are described below in the detail that actually matters.
Analytics
The site runs Google Analytics 4 (property G-QXYYHJYT8Y). It is the only third-party script on the site. It sets its own cookies in your browser — the ones named _ga and _ga_<id> — and reports to Google which pages were opened, roughly where in the world from, on what kind of device, and which site sent you. That is used for one thing: deciding which waters and which questions deserve work next.
Two things worth being plain about. First, this is a real third party: what it collects goes to Google under Google’s terms, not ours. Second, at the time of writing the site does not show a consent banner, so those cookies are set before you are asked. That is a gap, it is being worked on, and saying so here is better than pretending otherwise. Until then, if you would rather not be counted, a browser that blocks third-party cookies, any content blocker, or Google’s own opt-out extension will all stop it, and nothing on the site will break: every page here is rendered on the server and works with scripts disabled entirely.
The catch form
Every water page has a form for sending in a report of your own. If you use it, these are the columns it writes, and there are no others:
- water_slug — which water you were reporting on.
- angler_name — whatever you typed in the name field. It can be blank, and it can be a nickname.
- species and notes — what you caught and what you wrote about it.
- email — optional, and only so we can come back to you about your report.
- created_at and status — the timestamp, and whether the report is pending, approved or rejected.
No IP address is stored with the report, and no account is created. The data sits in a Postgres database run by Supabase in eu-west-1, Ireland, so submissions stay inside the EU. Nothing is published automatically: every report waits in a moderation queue until a person approves it. If it is approved, the name, species, notes and date appear on that water’s page. Your email address is never published and is never used for a mailing list, because there is no mailing list.
Who your browser talks to
This is the part most privacy pages skip, and it is the most useful one. Reading a report on this site, your browser makes requests to exactly two hosts: this site, and Google Analytics. That is it.
In particular, the typefaces are compiled into the site at build time and served from our own domain, so no request goes to Google Fonts. There is no CDN in front of the assets. There are no embedded videos, maps, social buttons or comment widgets. And although every report is built from USGS gauges, NOAA tide stations and Open-Meteo, your browser never contacts any of them: those are read on the server when the page is generated, so reading about a river does not announce you to a federal API.
Server logs
The site is hosted on Vercel, which keeps the ordinary request logs any web server keeps — IP address, time, URL, user agent — for a short period, and uses them to serve and protect the site. We do not build anything on top of those logs and do not connect them to anything else.
Having your data removed
If you sent a catch report and want it gone, or want to see what it says, write to hola@prqdigital.com from the address you used, or describe the report well enough to identify it. It will be deleted, not hidden. No explanation is required and nothing is negotiated: it is your report.
The site is run from Spain by one person, so the GDPR applies to it and the rights it gives you — access, correction, deletion, objection — are exercised through that same address. There is no form to fill in and no ticket number.
Changes to this page
When what the site does changes, this page changes first and carries the date. If a consent banner appears, if analytics is replaced with something that does not use cookies, or if the form ever stores a field that is not in the list above, it will be described here on the day it happens. The verification log records the site’s own mistakes with dates, including the ones nobody would have noticed; this page is held to the same standard.