Privacy policy
Version of 16.10.2026
Written in accordance with the Swiss Federal Act on Data Protection (FADP) and, for people residing in the European Union, the General Data Protection Regulation (GDPR).
Controller
Urbanleaf Sàrl, Passage Vuillermet 2, 1180 Rolle, Switzerland; contact@navleman.ch.
The principle
Navleman works first and foremost on your device. There are no cookies, no audience measurement tools, no advertising and no resale of data. The application uses the browser's local storage, which is essential to keep your settings and to work without a network; it is not a cookie and nothing in it is read remotely.
What stays on your device
GPS position (used only on screen), tracks, saved places and zones, routes, race courses, logbook, settings, boat and polar, copies of maps and data for offline use. You erase them by clearing the site data in your browser.
What goes out over the Internet
| Recipient | Data sent | Why |
|---|---|---|
| Infomaniak Network SA (hosting provider, Switzerland) | IP address, file requested, date and time, browser | serving the application; technical logs kept by the hosting provider |
| cdnjs (Cloudflare, United States) | IP address | loading the Leaflet map library |
| navleman.ch gateway | IP address, name of the data requested (wind, currents, lake level, CIPEL maps…); for “Near the destination”, the chosen destination rounded to about 2 km; never your GPS position. A hash of the IP address is used for a few minutes to limit abuse. | grouping and caching public data |
| navleman.ch accounts, only if you create an account | an identifier derived from your code (not the code), your data encrypted on your device, the date of creation and of last sync, the version of the terms accepted and its date. On creation, a hash of your IP address, recalculated daily and deleted after two days, limits the number of accounts created. | finding your data on another device |
| Base maps: CARTO (United States), swisstopo (Switzerland), IGN (France, Satellite base map on the French side, data.geopf.fr), OpenStreetMap (United Kingdom, backup map) | IP address, tiles displayed (and therefore the area viewed) | displaying the map |
| Open-Meteo | IP address, coordinates of the points for which you request weather or a route | wind and weather forecasts |
| Eawag (Alplakes) | IP address, period and area requested | currents, water temperature |
| Nominatim (OpenStreetMap) | IP address, text typed into the place search | finding a place by name |
| MeteoSwiss and swisstopo (geo.admin.ch), SITG, CIPEL, existenz.ch, transport.opendata.ch, Overpass (OpenStreetMap) | IP address only (requests for the whole lake, without position); CIPEL and existenz.ch are only contacted if the gateway does not respond; if the gateway is unavailable, Overpass receives the chosen destination, rounded to about 2 km | measured wind, radar, reserves, water quality, lake level, CGN timetables |
| OpenWindMap, Datalakes (Eawag) | IP address only, and only if the gateway does not respond (same stations for everyone, no position) | wind measured at lake level |
| Webcams, places' websites, Google Maps | nothing until you open the link | links to external pages |
The anti-bot check, when an account is created, is computed on your device and verified by our server: no third-party service, no cookie.
The account
No name, email address or phone number is asked for. The code is created by your device and never transmitted; your data is encrypted on your device (AES-GCM) before sending, and the server cannot read it. GPS tracks are never sent. An account not synced for 24 months is deleted, as is an empty account (never synced) left unused for 30 days; “Delete my account” erases it immediately.
Transfer outside Switzerland
CARTO and Cloudflare (cdnjs) are based in the United States: your IP address, and for CARTO the map area displayed, pass through there. To avoid CARTO, choose the “Satellite” base map (swisstopo, and IGN in France, two European public services) in Menu › Base map.
Your rights
Access, rectification, erasure and objection, by writing to contact@navleman.ch. As we do not know your identity, your code will be needed to act on an account; erasure can also be done directly in the application. You can contact the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the European Union, your country's authority (in France, the CNIL).
Updates
The version date appears at the top of the page; a significant change is announced in the application.