Privacy Policy

Last updated: August 2026 · WoodenShoeBoater.com

1. Who We Are

WoodenShoeBoater.com is a public information site for Dutch inland waterway bridge closures and navigation alerts. Privacy contact: privacy@woodenshoeboater.com

2. Data We Collect and Why

• Email address — only if you subscribe to change alerts. Used solely to send those alerts. Legal basis: explicit consent (GDPR Art. 6(1)(a)).
• Server logs / IP address — retained 14 days for security. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
• Analytics — only if you accept cookies. Google Analytics 4 tracks aggregate page usage. Legal basis: consent (GDPR Art. 6(1)(a)).
• reCAPTCHA data — Google reCAPTCHA v3 analyses browser behaviour on the subscribe form to block spam. See Google’s Privacy Policy. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).

3. Email Subscriptions

• Double opt-in: you must click a confirmation link before any emails are sent.
• Your email is stored on our EU server (Amsterdam, Netherlands — Vultr).
• Delivered via smtp2go (EU-compliant). No marketing, no third-party sharing, ever.
• Unsubscribe anytime via the one-click link in every email we send.
• Request deletion: privacy@woodenshoeboater.com

4. Cookies

• wsb_cookie_consent — remembers your consent choice. 365 days. Strictly necessary.
• Google Analytics (_ga, _ga_*) — placed only after you click “Accept”. 2 years. Never loaded if you decline.

5. Third-Party Services

• Google Analytics 4 (consent only) — Privacy Policy
• Google reCAPTCHA v3 (spam prevention) — Privacy Policy
• Google Fonts (typeface CDN) — Privacy Policy
• smtp2go (email delivery) — Privacy Policy
• Rijkswaterstaat / vaarweginformatie.nl — waterway data (public open data; no personal data shared)
• Vultr (EU hosting, Amsterdam) — Privacy Policy

6. Your GDPR Rights

As an EU/EEA resident you have the right to access, rectify, erase, restrict, port, and object to your data, and to withdraw consent at any time. Email privacy@woodenshoeboater.com — we respond within 30 days. You may also complain to the Autoriteit Persoonsgegevens or your local supervisory authority.

7. Retention, Security & Children

• Email subscribers: until you unsubscribe or request deletion.
• Server logs: 14 days. Analytics: Google’s default 14-month retention.
• All data over HTTPS. Server in Amsterdam, Netherlands (EU).
• Not directed at children under 16. We do not knowingly collect data from minors.

8. Changes

We may update this policy occasionally. The date above reflects the latest revision.