Privacy Policy

HullTrace (“we,” “our,” “us”) operates hulltrace.com. This policy describes what information we collect when you use our service, how we use it, and your rights with respect to that information. We do not sell personal data.

Information you provide

We collect only what is necessary to deliver a report. When you purchase a report, Stripe processes your payment information directly — we receive a confirmation token and your email address, but never your card number, CVV, or billing address. We store your email address to send your report confirmation.

Information collected automatically

We use Google Analytics 4 to understand how visitors use the site. This collects anonymized usage data including pages visited, session duration, and general geographic region (country/city level). GA4 is configured without user-level advertising identifiers. We also log server-side request metadata (IP addresses, user agent strings) for security and abuse prevention. These logs are retained for 30 days.

HIN searches

We log HIN lookup queries to improve data quality and detect fraudulent use. HIN strings are not personally identifiable information.

• To deliver paid vessel history reports
• To send order confirmation emails
• To detect and prevent fraudulent or abusive activity
• To improve site performance and data accuracy
• To comply with legal obligations

We use the following third-party services to operate HullTrace:

We use a minimal set of cookies. Strictly necessary cookies keep your session active during checkout. Google Analytics sets analytics cookies that track anonymous usage patterns. We do not use advertising, retargeting, or cross-site tracking cookies. You may opt out of analytics cookies by enabling “Do Not Track” in your browser or using a browser extension like uBlock Origin.

Order records (email, HIN, report timestamp) are retained for 7 years to comply with financial record-keeping requirements. Analytics data is retained for 26 months per Google's default GA4 policy. Server logs are purged after 30 days.

Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you. To exercise any of these rights, email us at privacy@hulltrace.com. We will respond within 30 days.

If you are a resident of the European Economic Area or the United Kingdom, you have rights under GDPR/UK GDPR including the right to object to processing and the right to data portability. If you are a California resident, you have rights under the CCPA including the right to know, delete, and opt out of the sale of personal information (we do not sell personal information).

HullTrace is not directed at children under 13 and we do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be noted with a new effective date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions about this policy? Email privacy@hulltrace.com.