1. What we collect
- Screening queries. When you screen a vessel by IMO number or name, your query is processed in real time against sanctions data. We do not store or log your screening queries.
- Registration & early-access requests. If you register or join a waitlist, we collect the name, email address and company name you provide, plus any optional message.
- Session data. If you sign in to a registered area, we store a temporary session token to keep you logged in.
- Usage analytics. We use Cloudflare Web Analytics, which is privacy-first and cookieless — it sets no cookies, performs no cross-site tracking, and does not identify you personally.
- What we do not collect. We do not collect payment information and we do not use advertising or tracking cookies.
2. Why we process it, and our legal basis
- To provide the screening service — legitimate interest.
- To respond to registration and early-access requests and to contact you about access — consent, given when you submit the form.
- To keep you signed in where you have registered — necessary to provide the service you requested.
- To maintain security and prevent abuse — legitimate interest.
3. How long we keep it
- Screening queries — not stored.
- Registration / early-access details — kept for as long as needed to handle your request and provide access, or until you ask us to delete them.
- Session tokens — temporary; they expire automatically.
4. Who we share it with
We use trusted service providers (sub-processors) to operate VSS. They process data only on our behalf, under data-processing agreements:
- Railway — application hosting and infrastructure.
- Cloudflare — content delivery, TLS encryption, security and cookieless analytics.
- Resend — delivery of transactional email (for example, access and notification messages).
We never sell your personal data.
5. International transfers
Some of our providers are based in the United States. Where personal data is transferred outside the European Economic Area, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these, email [email protected]. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
7. Security
The site is served exclusively over HTTPS (TLS), delivered through Cloudflare’s global network. We collect as little data as possible: the free screening tool requires no account and no personal data to perform a search. Access to any registered features is granted through secure, single-use links.
8. Changes to this policy
We may update this policy from time to time. The “last updated” date above always reflects the current version.
Questions about this policy: [email protected].