Privacy Policy
Sail JADA Charters LLC — operating queenofsandiego.com and affiliated sites
Effective date: July 15, 2026
1. Who We Are
Sail JADA Charters LLC ("we," "us," or "JADA operations") operates queenofsandiego.com and a network of affiliated websites (together, the "JADA sites"). This policy describes how we collect, use, and protect information from people who visit those sites or create a community account.
Questions or requests? Reach us at admin@queenofsandiego.com.
2. What We Collect
We collect only what we need to run the community features and understand our audience. Here is the complete list, with no hidden categories.
2a. Account information (when you sign up)
When you create a community account — through an email magic-link — we receive and store:
| Field | Source |
|---|---|
| Verified email address | Magic-link verification |
| Display name (optional) | Provided by you at sign-up |
| Consent record | Checkbox at sign-up |
We do not receive or store any social-media password.
2b. Optional self-declared information
After sign-up, you may (at your option) tell us your city or region, how you found us, and interests (sailing, history, private charters, etc.). These fields are entirely voluntary. Skipping them does not limit your access.
2c. Technical and behavioral information (collected automatically)
| Field | How it is collected |
|---|---|
| IP address | Server logs |
| Coarse geographic location (city/state level) | Derived from IP; we do not store precise GPS |
| Browser and device type | HTTP user-agent header |
| Referring URL | HTTP referer header |
| UTM / marketing campaign parameters | URL query string |
| Landing article or page | URL |
| Timestamps (account creation, logins, comments) | Server clock |
| Engagement signals (articles read, approximate dwell time) | Client-side analytics |
We collect this information from all visitors, not just registered members.
2d. Community content
When you post a comment or reply, we store the text, the article it was posted on, the timestamp, and the moderation status (pending, approved, hidden, or removed).
2e. Consent record
We log the date and time you checked the consent box at sign-up and the version of this policy that was in effect. This record is kept for our legal compliance purposes.
3. How We Collect It
- Account creation: When you enter your email for a magic-link, that address is transmitted to us directly.
- Commenting: The text you type and submit is sent to our API and stored in our database.
- Analytics (Google Analytics 4): We use GA4 to measure site traffic and engagement. GA4 sets cookies and collects behavioral data under Google's own privacy terms. We configure GA4 to avoid sharing personally identifiable information with Google beyond what is required for aggregate analytics.
- Server logs: Our hosting infrastructure (AWS) automatically captures the technical fields in §2c as a standard part of serving web pages.
4. Why We Collect It
| Purpose | Data used | Legal basis (CPRA) |
|---|---|---|
| Providing community features (commenting, profiles) | §2a, §2b, §2d | Performance of contract / service |
| Spam prevention and content moderation | §2a, §2c, consent record | Legitimate interest in maintaining a safe community |
| Understanding our audience and improving content | §2c, §2d | Legitimate interest; consent where required |
| Personalizing your experience (e.g., showing your name) | §2a, §2b | Performance of contract |
| Marketing communications (only with your explicit opt-in) | Email address, §2b interests | Consent |
| Legal compliance and security | All categories | Legal obligation / legitimate interest |
We do not use automated decision-making to determine your access to services in ways that have significant legal or similarly significant effects on you.
5. Who We Share It With
We share your information only with the vendors who help us run these sites. We do not sell, rent, or trade your personal information to anyone.
| Service provider | Purpose | Data shared |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, database (DynamoDB), email (SES) | All stored data, hosted on AWS infrastructure |
| Google LLC (Google Analytics 4) | Audience analytics | Behavioral data per §2c; anonymized where possible |
All service providers are under contractual obligations to process your data only as directed by us and in compliance with applicable law.
We may also disclose information (a) if required by law, court order, or valid legal process; (b) to protect the rights, safety, or property of JADA operations, our users, or the public; or (c) in connection with a merger, acquisition, or sale of substantially all our assets, in which case we will notify affected users.
6. Cookies and Local Storage
- Session and authentication cookies — to keep you signed in. These are essential and cannot be opted out of while using community features.
- Google Analytics cookies — to measure traffic and engagement. You may opt out of GA tracking by installing the Google Analytics Opt-out Browser Add-on or by using your browser's "Do Not Track" / privacy settings.
- Local storage — our comment widget may use browser local storage to cache your authentication token and draft comment text across page loads.
We do not use advertising cookies or third-party tracking pixels beyond Google Analytics.
7. Data Retention
| Category | Retention period |
|---|---|
| Account records (§2a, §2b) | Until you request deletion, or 3 years after your last login, whichever comes first |
| Comments | Until deleted by you, removed by moderation, or the associated site is retired |
| Server and analytics logs (§2c) | 90 days in raw form; aggregate analytics retained indefinitely |
| Consent records | 5 years (legal compliance) |
When we delete your account, we remove your personal information from active systems and queue it for deletion from backups on their normal rotation schedule.
8. Security
We store community data in AWS DynamoDB, protected by AWS identity and access controls. All data is transmitted over HTTPS. Access to the moderation dashboard requires separate crew-level authentication that is completely isolated from community accounts — a community account cannot be used to gain any administrative access to our systems by design.
No system is perfectly secure. If you discover a security issue, please contact us at admin@queenofsandiego.com before disclosing publicly.
9. Children's Privacy
The JADA sites are not directed to children under 16. We do not knowingly collect personal information from anyone under 16. If we learn that we have inadvertently done so, we will delete it promptly. If you believe a minor has created an account, please contact us at admin@queenofsandiego.com.
10. Your California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to Know. You may request a copy of the personal information we have collected about you in the past 12 months, the categories of sources, the purposes for which it was collected, and the categories of third parties we have shared it with.
Right to Delete. You may request that we delete the personal information we hold about you, subject to certain exceptions (e.g., information we are required by law to retain).
Right to Correct. You may request that we correct inaccurate personal information we hold about you.
Right to Opt Out of Sale or Sharing. We do not sell your personal information. We do not share it with third parties for cross-context behavioral advertising. If our practices ever change, we will update this policy and honor any opt-out signal, including the Global Privacy Control (GPC), before doing so.
Right to Non-Discrimination. Exercising any of these rights will not result in different pricing or service quality.
How to exercise your rights. Email admin@queenofsandiego.com with the subject line "California Privacy Request." We will respond within 45 days (extendable by an additional 45 days with notice). We may ask you to verify your identity before processing the request.
You may also designate an authorized agent to make a request on your behalf by providing written authorization.
11. Do Not Sell or Share My Personal Information
We do not sell or share your personal information as defined under the CCPA/CPRA. If that ever changes, this page will include a "Do Not Sell or Share My Personal Information" link in the site footer, and the link will take you to a form to record your preference.
At present, a "Do Not Sell or Share" request is honored by default — we don't do it.
12. Changes to This Policy
If we make material changes to this policy, we will update the effective date at the top of this page and, where feasible, notify registered members by email. Continued use of community features after the effective date constitutes acceptance of the updated policy.
13. Contact
JADA operations
Sail JADA Charters LLC
admin@queenofsandiego.com
Also see our Community Guidelines for the rules that govern comment threads.
This document is not legal advice. Last updated: July 15, 2026.