Privacy Policy
Beta draft — under legal review. Effective August 17, 2026.
The short version
Ships Pass is built around a simple idea: say the thing you didn't say, without giving up your privacy to do it. We collect the minimum we need to run the app. We never sell your information. We never show anyone your gender or who you're attracted to. We don't know where you are — the app never asks for your location. And nothing you post appears in real time; posts publish the next calendar day, showing only the rough time you chose to describe.
The rest of this page says the same thing with the details filled in.
Who we are
Ships Pass is operated from San Francisco, California. You can reach us anytime at help@shipspass.com.
What we collect
Your account. Your email address, a password (we never see or store the password itself — only a secure hash held by our authentication provider), your username, your gender, who you're attracted to, and your confirmation that you're 18 or older. Your gender and who you're attracted to are used for exactly one thing: deciding which posts are relevant to show you. They are never displayed to anyone, anywhere in the app.
What you write and share. Your posts — the venue, a rough time like "Tuesday evening," the text you wrote, and whether you marked it romance or friendship. Your messages with other people. Photos, if you choose to share one inside a conversation, and a profile photo if you add one. The venues you follow.
Safety records. Blocks you place, reports you make, reports made about your content, and the outcomes of moderation review.
Technical basics. Our infrastructure providers keep standard server logs (things like IP address and browser type) for security and operations, and your browser holds a session token so you stay signed in. That's it. Ships Pass runs no analytics trackers, no advertising technology, and no fingerprinting of any kind.
What we deliberately don't collect
Your location — the app never asks for it, and Ships Pass never knows where you are. Your contacts. Your real name. Exact timestamps on posts: the time shown is the rough label you picked, nothing finer.
How we use your information
To run the app: showing you posts, delivering your posts to others, carrying your conversations. Romance posts are shown only where attraction matches in both directions — your stated preferences meeting theirs, and theirs meeting yours.
To notify you: we send transactional email (confirmation, password reset, and notifications such as new messages or new posts at places you follow). Message notification emails deliberately contain no message content — they tell you something arrived, not what it says.
To keep the community safe: reviewing reports, enforcing our rules, and maintaining the block system.
To process payments, if you subscribe to a paid tier: payment is handled by Stripe. Your card number goes to Stripe, not to us; we see subscription status, never card details.
Who sees what
Your username and your posts are visible to other users the app matches you with. Your gender and attraction settings are never shown to anyone. Posts appear the day after you write them — never in real time — and carry only the rough time label you chose. Messages are private between you and the other person. Photos can only be shared inside an established conversation, never on a public post. When you delete a post, it disappears from everyone's view, including your own.
Service providers
We use a small set of companies to run Ships Pass, each receiving only what their job requires: Supabase (database, authentication, and storage), Netlify (hosting), Resend (email delivery), Stripe (payments, if you subscribe), and Google Places (when you search for a venue, the name you type is sent to Google to find matching places). We do not sell your personal information, we do not share it with advertisers, and we disclose it only to these providers, or if the law genuinely requires it.
Retention and deletion
Posts. Deleting a post removes it from everyone's view immediately and permanently — including yours. There is no undo. We retain an internal copy for safety and moderation purposes for 12 months, because posts are the evidence base when something is reported.
Conversations. If a post is deleted, conversations it started remain, showing "This post is no longer available" in place of the post. Messages persist until account deletion.
Your account. Until an in-app deletion flow ships, email help@shipspass.com from your account email and we will delete your account, profile, posts, and messages. We may retain moderation and safety records, and records we're legally required to keep.
Security
Access rules are enforced at the database layer itself (row-level security), not just in the app; photos live in private storage accessible only to the people a conversation permits; and the publish delay is itself a safety design — nothing you write can reveal where you are right now. No system is perfectly secure, and we can't promise the impossible; if a breach affects your data, we will notify you as the law requires.
Your rights
You can access, correct, or delete your information by emailing help@shipspass.com. If you're a California resident, you have rights under California privacy law, including to know what we collect and to request deletion — the practical answer is the same address.
18 and over
Ships Pass is for adults. We don't permit accounts from anyone under 18, and we don't knowingly collect information from minors. If you believe a minor is using Ships Pass, tell us at help@shipspass.com and we'll act on it.
Changes to this policy
If we change this policy, we'll update this page and note the new effective date. If a change meaningfully reduces your privacy, we'll tell you directly before it takes effect.
Contact
help@shipspass.com — a real inbox, read by the person who built this.