Effective 6 July 2026. Broaderworld (broaderworld.com) is operated by IATRT, Australia. This page explains what we collect, why, and what happens to it. Questions or requests: [email protected].
Account. You sign in with Google. We receive and store your name, email address and profile picture from your Google account. We never see your Google password.
Vessel details. The vessel name, MMSI, callsign, type and photo you enter when you register a boat.
Position data. Your vessel's position, speed, course and heading, from two sources: public AIS broadcasts matching your MMSI (received via aisstream.io), and GPS fixes pushed by the Broaderworld Android app when you enable it on your phone.
Distress events. If you trigger the distress alarm in the app, we store the event, its position and any message you attach, and send them by SMS to our monitoring contact so help can be arranged.
API keys. If you create a developer API key we store only a hash of it — the full key is shown once and cannot be recovered by us.
Server logs. Like almost every website, our server keeps standard access logs (IP address, page requested, time) for security and debugging.
We use one cookie: the session cookie that keeps you signed in. There is no advertising, no third-party analytics, and no tracking pixels.
Each vessel gets a private share link with a long, unguessable token. Anyone who has that link (or its QR code) can see the vessel's name and its track for the last 30 days — so share it only with people you trust. You, the owner, can see the last 90 days. Share pages are not listed anywhere and are excluded from search engines, but the link itself is the only protection, and while a distress alarm is active the share page shows the distress status too.
Full-detail positions are kept for 30 days, thinned to hourly points from 31 to 90 days, and deleted after 90 days. Account and vessel details are kept until you delete them or ask us to.
We share data only where the service needs it to work: Google handles sign-in; aisstream.io supplies incoming public AIS data (we send them nothing about you); ClickSend delivers distress SMS messages. Map, sea-mark and weather tiles (OpenStreetMap, OpenSeaMap, OpenWeatherMap) are fetched by our server and proxied to you, so those providers never see your IP address. Your browser does load fonts from Google Fonts and the map stylesheet from unpkg.com, and those hosts see your IP address as with any CDN. We never sell or rent your data.
You can delete a vessel (which deletes its track history) or revoke an API key from your dashboard at any time. To delete your account and everything attached to it, or to ask for a copy of your data, email [email protected] and we'll action it promptly. We handle personal information in line with the Australian Privacy Principles.
If this policy changes in a way that matters, we'll note it here with a new effective date.