Last updated: 27 October 2026
This policy explains which personal data is processed when you visit manta share pages and profiles, and when the manta iOS app talks to our servers. This English version is provided for convenience. The German version is authoritative.
Controller
Funkhaus Creative GmbH Strandstraße 91 18055 Rostock, Germany Managing director: Jan-Eric Winkelmann For all privacy matters, contact support@sailwithmanta.com.
The app keeps your data private
Trips you record with manta, including all location data, are stored on your device and in your personal, private iCloud database. We have no access to them, and the app contains no advertising and no third-party tracking. Weather data, maps and place names in the app come from Apple (WeatherKit, Apple Maps) under Apple's privacy terms. To name harbours and anchorages, the app asks the public OpenStreetMap servers of the Overpass API (overpass-api.de, with overpass.kumi.systems as a fallback) for places near your trip's positions; those requests contain coordinates and, technically, your IP address, but nothing else about you. Nothing reaches our servers until you actively use an online feature: signing in, publishing a trip or a profile, live tracking, or generating a trip story, and the app's usage statistics if you allow them. Only those features are covered by the sections below.
Services we use at a glance
• Our own servers (Funkhaus Creative GmbH): this website, accounts, published trips and photos, live tracking, and our self-hosted Umami statistics. • Apple: iCloud (your private logbook), WeatherKit, Apple Maps and place names in the app, Sign in with Apple, App Store purchases and their verification. • Google: Sign in with Google, only if you choose it. • Loops (Astro Technologies, Inc., USA): the newsletter and the e-mails with sign-in codes. • Anthropic PBC (USA): writing trip stories in the app. • OpenStreetMap Overpass API: harbour and anchorage names in the app. • Mapbox Inc. (USA): maps on this website. • Adobe Fonts (Adobe Inc., USA / Adobe Systems Software Ireland Ltd.): fonts on this website. • Your browser vendor's push service (e.g. Apple, Google, Mozilla): only if you turn on live notifications. The sections below explain what each one receives and why.
Hosting and server logs
When you open a page, our web server processes the data your browser transmits: IP address, browser and operating system, the requested URL, referrer and time of the request. We use it to deliver the site, keep it secure and diagnose faults; logs are kept only briefly. Published photos are delivered from our own storage at v2.files.funkhaus.io. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating the site securely).
Cookies
The site sets two functional cookies: manta_locale remembers your language and manta_consent remembers your cookie choice. Both are required for the service (§ 25(2) TDDDG) and need no consent. Only if you allow “Statistics” in the cookie settings, a third cookie, manta_visitor, stores a random ID so our analytics can recognise your browser on later visits (§ 25(1) TDDDG, Art. 6(1)(a) GDPR, your consent). You can change your choice at any time under “Cookie settings” at the bottom of every page; withdrawing deletes manta_visitor.
Analytics
We measure use of the site with Umami, self-hosted on our own infrastructure (analytics.apps.funkhaus.dev). Without your consent, Umami counts visits anonymously: no cookies and no stored identifiers. Visitors are told apart only by a hash of IP address, browser and date that changes daily and cannot be reversed. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding overall usage). If you allow “Statistics”, page views also carry the random ID from manta_visitor; if you allow “Heatmaps”, a recorder captures how the pages are used (clicks, taps, scrolling and mouse movement), which we view as heatmaps and session replays to find where the site is unclear. Legal basis: Art. 6(1)(a) GDPR (your consent, which you can withdraw at any time under “Cookie settings”). Analytics data stays on our server and is not shared with anyone.
Maps (Mapbox)
Trip, profile and Discover pages show maps or map images with tiles and styles loaded from Mapbox Inc. (USA). When a map loads, your browser transmits your IP address and technical request data to Mapbox. Mapbox processes this data on our behalf; transfers to the USA are safeguarded by the EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in displaying the voyage on a nautical map). The globe on the home and Discover pages is drawn by your browser from data on our own server; it loads nothing from Mapbox.
Fonts (Adobe Fonts)
To display our typeface, pages load fonts from Adobe Fonts, a service of Adobe Inc. (USA) and Adobe Systems Software Ireland Ltd. When a page loads, your browser transmits your IP address and technical request data (such as the page address and browser) to Adobe's servers. Adobe Fonts sets no cookies; according to Adobe, the data is used to deliver the fonts and to count page views for licensing. Transfers to the USA are covered by the EU–US Data Privacy Framework and the EU standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a consistent presentation of the site). Our second typeface, Axiforma, is served from our own server.
Live notifications (web push)
If you enable notifications on a profile, we store the push subscription your browser creates: the endpoint at your browser vendor's push service (e.g. Apple, Google or Mozilla), its cryptographic keys and your language, so notifications arrive localized. It is used solely to tell you when that profile goes live or posts updates. Legal basis: Art. 6(1)(a) GDPR (your consent). You can unsubscribe at any time in your browser's notification settings; permanently failing subscriptions are deleted automatically.
Newsletter
When you subscribe to our newsletter (or joined our earlier launch waitlist), we store your email address to send you the emails you signed up for. Signups are processed by our email service Loops (Astro Technologies, Inc., USA), which stores the address on our behalf; transfers to the USA are safeguarded by the EU standard contractual clauses. Legal basis: Art. 6(1)(a) GDPR (your consent). Every email contains an unsubscribe link, and you can request deletion at any time via support@sailwithmanta.com.
Accounts and sign-in
To publish to the web you sign in to a free account: with Apple, with Google, or with a one-time code sent to your e-mail address. We store your e-mail address, the sign-in method with the provider's user ID, and hashed access tokens for your devices with the time they were last used. The account is linked to your web profile. Sign in with Apple: Apple confirms your identity to us and, on your first sign-in, passes your e-mail address or, if you choose “Hide My Email”, a relay address that forwards to you. We also keep a token from Apple so that we can revoke the sign-in when you delete your account. Apple's privacy policy applies to the sign-in itself. Sign in with Google: the app opens Google's sign-in page in a secure browser window. Google (Google Ireland Limited; outside the EEA Google LLC, USA) confirms your identity and e-mail address to us; we receive nothing else from your Google account. Google's privacy policy applies to the sign-in itself. E-mail code: we send a six-digit code to the address you enter. The code is stored only as a hash and expires after 10 minutes. The e-mail is sent by our e-mail service Loops (Astro Technologies, Inc., USA) on our behalf; transfers to the USA are safeguarded by the EU standard contractual clauses. To prevent abuse, we briefly count code requests per IP address (in memory, for one hour). Legal basis: Art. 6(1)(b) GDPR (performance of the account and sharing service you requested); for the abuse limits Art. 6(1)(f) GDPR (our legitimate interest in protecting the service). You can sign out at any time and delete your account in the app (Settings → Web profile → Delete account): this deletes the account, your sign-ins, your profile and everything you shared, and revokes Sign in with Apple.
Content published by manta users
Everything on share pages, profiles and live views was published by a manta user (the skipper). A published trip can contain the GPS track with times and speeds, log entries and notes, weather data, photos, the boat's name and the skipper's profile (username, display name, bio, avatar, social links). While live tracking is switched on, the boat's position and instrument data are shown in near real time. A published trip is visible to anyone who has the link. If the publisher has claimed a public username, the trip is also listed on their profile and in the Discover section of this site (with its title, route, date, distance, boat name, first photo and its starting position on the Discover globe) and can be found through the site search. Trip pages themselves are excluded from search-engine indexing. Publishers can unpublish trips and delete their profile in the app at any time; this removes the data, including photos, from our servers. The publishing user decides what appears and is responsible for it, including the rights of other people visible in photos, texts or tracks. We store and display this content as a hosting service within the meaning of Art. 6 of the Digital Services Act (DSA) and are not obliged to generally monitor it (Art. 8 DSA). If you believe content on this site is unlawful or infringes your rights, notify us at support@sailwithmanta.com with a link to the page. We review reports promptly and remove unlawful content. Legal bases: Art. 6(1)(b) GDPR towards the publishing user; Art. 6(1)(f) GDPR (display of content the user chose to make public) towards other persons appearing in it.
Services for the app: trip stories and purchase verification
When you generate a trip story in the app, the trip's facts (route, times, distances, weather, log entries, boat name, but no account data) are sent to our server and forwarded to Anthropic PBC (USA), where the Claude language model writes the story text that is returned to your app. Anthropic processes this data on our behalf and does not use it to train models; transfers are safeguarded by the EU standard contractual clauses. To confirm a request belongs to a manta Pro purchase, the app includes a purchase confirmation signed by Apple. We verify the signature and use the purchase's anonymous transaction identifier; when you sign in, it also lets us carry a web profile created before accounts existed over to your account. We never see your Apple ID, your name or any payment data. Legal basis: Art. 6(1)(b) GDPR (performance of the service you requested).
App usage statistics
From your second session on, the app asks how it may count its use; until you answer, nothing is counted. The counts cover which screens are opened and which features are used (for example “trip shared”), with the app version, app language and screen size, never positions, tracks, place names, titles, photos or texts. They go to our self-hosted Umami (analytics.apps.funkhaus.dev) and are not shared with anyone. “Stay anonymous”: no identifier is stored; Umami tells devices apart only by a daily-changing, irreversible hash of IP address and device type. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in improving the app). “Count me in”: the app also stores a random device ID and sends it with each count, so we can see how use develops over time. It is not linked to your account, your trips or your name. Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR (your consent). You can switch the device ID or all statistics off at any time in the app under Settings → Privacy & Analytics.
Retention and deletion
Published content stays online until you unpublish or delete it in the app. Your account and its sign-ins are kept until you delete the account; unused sign-in codes expire after 10 minutes. Live positions serve only the live view and are superseded when the trip is published or the session ends. Push subscriptions are kept until you unsubscribe or delivery fails permanently. Server logs are kept short-term. For deletion requests beyond what the app offers, contact support@sailwithmanta.com.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), and you may withdraw any consent with effect for the future. Contact support@sailwithmanta.com. You can also lodge a complaint with a supervisory authority. For us that is the Landesbeauftragter für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern, Schwerin, Germany.