Privacy and cookies

How Yawar handles your data, and which cookies we use.

Last updated:

Who we are

Yawar (yawar.care) is a website with information about aquariums: articles, a water change calculator and a water log for members. This statement explains which data we process, why, and which cookies we use. You will find the controller responsible for the processing under “Contact” at the bottom of this page.

When you visit the website

You can read all articles and use the water change calculator without an account. We don’t use analytics or advertising services and don’t track you across other websites. To prevent abuse, such as too many login attempts, the server briefly keeps your IP address in its working memory; it is not stored in a database and disappears by itself.

The fonts, photos and videos on this website are hosted on our own server. Your browser doesn’t connect to third-party services to load them.

When you create an account

Members can keep a water log. For this we process:

  • Account details: your name, email address and preferred language.
  • Your password, which we only store in encrypted (hashed) form. We can’t read it ourselves.
  • Signing in with Google: if you choose this, Google gives us your name, email address and a Google account ID. We never see your Google password.
  • Your water log: the parameters you track and your measurements with their dates.
  • Technical account data, such as when the account was created, whether your email address is confirmed and the number of failed login attempts (to protect your account).

We only use your email address for messages about your account: confirming your email address, a welcome email and, if you ask for it, a link to reset your password. We don’t send newsletters or advertising, and we don’t sell your data.

Why we may do this (legal bases)

  • Your account and water log: necessary to provide the service you register for (performance of a contract, Art. 6(1)(b) GDPR).
  • Security and abuse prevention, such as limiting login attempts: our legitimate interest in keeping the website and your account secure (Art. 6(1)(f) GDPR).

How long we keep your data

For as long as your account exists. If you ask us to delete your account, we erase your account and your water log. Copies in our backups disappear automatically within fourteen days.

Who we share data with

  • Our hosting provider, which manages the server that runs the website and the database.
  • An email service that sends the emails about your account.
  • Google, only if you choose to sign in with Google. Google’s privacy policy also applies.

The hosting provider and the email service only process your data on our behalf. We don’t pass your data on to anyone else, unless the law requires us to.

Cookies

Cookies are small text files that a website stores in your browser. Yawar only uses functional cookies that are needed for what you ask for yourself, such as staying logged in. These don’t require consent, which is why we don’t show a cookie banner. We use no analytics, tracking or advertising cookies.

  • NEXT_LOCALE: remembers the language you choose with the language switcher. Kept for 1 year.
  • payload-token: keeps you logged in after you sign in. Kept for 1 week, or until you log out.
  • yawar-oauth-google: a temporary security code while signing in with Google. Kept for at most 10 minutes.

In addition, the water change calculator stores the values you last entered in your browser’s local storage, so you find them again next time. This data stays on your own device and is not sent to us.

You can always delete cookies and local storage in your browser settings. The website keeps working, but your language choice and login will no longer be remembered.

Security

The website only works over a secure connection (https). Passwords are stored encrypted, the number of login attempts is limited and new accounts must confirm their email address.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to object, and to receive your data in a common format. To do so, send an email to the address under “Contact”. We will reply within one month.

If you are not satisfied with how we handle your data, you can lodge a complaint with the supervisory authority in your country, such as the Autoriteit Persoonsgegevens in the Netherlands, the Data Protection Authority in Belgium or the CNIL in France.

Changes

We may update this statement, for example when we add new features. The date at the top of this page shows when it was last updated. If we ever add cookies that require consent, we will ask for it first.