Privacy Policy

Last updated: January 20, 2026

1. Introduction

Shipboard ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

We comply with the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) for California residents, and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Email address, name, and password when you create an account
  • Profile Information: Optional information you add to your profile
  • Content: Ideas, notes, and other content you create within Shipboard
  • Communications: Information you provide when contacting support

2.2 Information Collected Automatically

  • Usage Data: How you interact with our services
  • Device Information: Browser type, operating system, device identifiers
  • Log Data: IP address, access times, pages viewed
  • Cookies: See our Cookie section below

2.3 Third-Party Authentication

If you sign in using Google or other third-party providers, we receive your name, email address, and profile picture as permitted by your privacy settings with that provider.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Create and manage your account
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent or illegal activities
  • Personalize and improve your experience

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data based on:

  • Contract: Processing necessary to provide our services to you
  • Legitimate Interests: Improving our services, preventing fraud
  • Consent: Where you have given explicit consent
  • Legal Obligation: Compliance with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third parties that help us operate our services (hosting, analytics, payment processing)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you direct us to share information

6. Your Rights

6.1 For All Users

  • Access your personal information
  • Correct inaccurate data
  • Delete your account and data
  • Export your data

6.2 Additional Rights for EU Users (GDPR)

  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to lodge a complaint with a supervisory authority

6.3 Additional Rights for California Residents (CCPA)

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to say no to the sale of personal information
  • Right to equal service and price

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Essential Cookies: Required for the application to function
  • Authentication: Keep you signed in
  • Preferences: Remember your settings (e.g., dark mode)
  • Analytics: Understand how our services are used

You can control cookies through your browser settings. Note that disabling certain cookies may affect functionality.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/SSL), secure data storage, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission where applicable.

11. Children's Privacy

Shipboard is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice (e.g., email notification).

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@shipboard.io