What this policy covers
This policy applies to The Chop Report website, weekly newsletter, and associated services. It explains what personal data is collected, why it is processed, how long it is kept, and what your rights are under the General Data Protection Regulation (GDPR).
The Chop Report is a personal project — not a company, registered business, or commercial entity. It is not affiliated with any employer. No data is sold to third parties. No advertising networks are used.
Who is responsible for your data?
The Chop Report is operated by an individual based in Lithuania. As the project serves users in Lithuania, Latvia, and Estonia (all EU member states), GDPR applies in full.
For any privacy-related enquiries: hello@chopreport.com
What data is collected and why?
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | Newsletter delivery via Resend | Consent (opt-in) | Until unsubscribe |
| Anonymous session ID | Aggregate usage statistics for newsletter | Legitimate interest | 12 months |
| Scan results (conditions, scores, timestamps) | Weekly newsletter generation | Legitimate interest | 12 months |
| Chuck verdict text (anonymised) | Newsletter Quote of the Week | Legitimate interest | 12 months |
| Google Analytics data | Site usage statistics | Consent (cookie banner) | 14 months (GA4 default) |
| IP address | Server logs, security (anonymised) | Legitimate interest | 30 days |
What is NOT collected
- Names, phone numbers, or physical addresses
- Payment information of any kind
- The Chuck profile (name, location, sports, gear) — stored locally in your browser only, never transmitted to our servers
- Individual scan histories linked to identifiable users
Newsletter and email
The Chop Report Weekly Dispatch is sent via Resend. By subscribing, you consent to your email address being processed by Resend for delivery purposes. Resend's privacy policy applies to their handling of your data.
Your email address is used solely for newsletter delivery. It is never sold, shared with third parties for marketing purposes, or used for any other purpose.
Unsubscribing
Every newsletter contains an unsubscribe link. Clicking it removes your email address immediately. You can also request removal by emailing hello@chopreport.com.
Scan logging and anonymous usage data
When you run a scan, anonymised data is logged to a database and used exclusively to generate the weekly newsletter — specifically the Week Verdict, Spot of the Week, Missed Window, and By the Numbers sections.
What is logged
- A random session ID generated in your browser (stored in localStorage). Not linked to your identity in any way.
- Conditions data from the weather and marine APIs for each spot (wind speed, direction, wave height, temperature, score).
- The Chuck verdict text, with any user-provided name removed before storage.
- The timestamp of the scan.
What is NOT logged
- Your IP address is not stored alongside scan data.
- No cross-referencing between scan data and email addresses is performed.
- The Chuck profile is never transmitted to or stored by The Chop Report's servers.
The legal basis for this processing is legitimate interest — specifically, generating meaningful weekly newsletter content. Data is processed in aggregate only.
Cookie policy
Strictly necessary cookies (always active)
These cookies are required for the site to function. They do not require consent and cannot be disabled.
| Cookie / Storage key | Purpose | Duration |
|---|---|---|
| cr3_prefs | Stores your wind, wave, and weather preferences | Until manually cleared |
| cr3_spots | Stores your configured spots list | Until manually cleared |
| cr3_persona | Stores your Chuck profile locally | Until manually cleared |
| cr3_session | Anonymous session ID for scan logging | Until manually cleared |
| cr3_cookie_consent | Records your cookie consent preference | Until manually cleared |
Analytics cookies — Google Analytics 4 (with your consent)
With your consent, The Chop Report uses Google Analytics 4 to understand how visitors use the site. No personally identifiable information is collected through analytics. IP anonymisation is enabled — your full IP address is never sent to Google.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes users for analytics | 2 years |
| _ga_XXXXXXXX | Maintains session state | 2 years |
| _gid | Distinguishes users (shorter term) | 24 hours |
You can withdraw consent for analytics cookies at any time:
Google's privacy policy applies to data collected via Google Analytics.
Third-party services
| Service | Purpose | Data shared |
|---|---|---|
| Resend | Newsletter delivery | Email address only |
| Lovable AI Gateway (Google Gemini) | Chuck and Dr. Mara Lindqvist AI briefs | Scan conditions + Chuck profile (transient, not stored) |
| Open-Meteo | Weather and marine data | Spot coordinates (no personal data) |
| Google Analytics | Site usage statistics (with consent) | Anonymised usage data, anonymised IP |
Your rights under GDPR
- Access — request a copy of data held about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data
- Restrict processing — request limited processing while a dispute is resolved
- Data portability — request your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — withdraw consent at any time without affecting prior processing
To exercise any right: hello@chopreport.com. Requests will be responded to within 30 days at no charge.
You may also lodge a complaint with the Lithuanian supervisory authority: State Data Protection Inspectorate (vdai.lrv.lt).
International data transfers
Some services used by The Chop Report are based outside the EEA. Appropriate safeguards apply in all cases:
- Resend (US) — standard contractual clauses (SCCs)
- Lovable AI Gateway / Google Gemini (US) — prompt data is transient, not stored; SCCs apply
- Google Analytics (US) — Google's EU data transfer mechanisms and SCCs
Data retention
- Email addresses — retained until unsubscribe; deleted within 30 days
- Anonymous scan logs — retained for 12 months, then automatically deleted
- Google Analytics data — 14 months (GA4 default)
- Server logs — 30 days for security purposes, then deleted
Changes to this policy
This policy may be updated from time to time. The effective date at the top indicates the last revision. Significant changes will be communicated to newsletter subscribers via email.
The Chop Report · A personal project · Not affiliated with any company or employer.