Privacy, cookies and legal notice

The forecast: what the server sees, and what it keeps

There are no cookies on the forecast, no analytics, no advertising pixels, no fingerprinting and no account. Nothing about your visit is recorded against you, and you are not asked to accept anything, because there is nothing to consent to.

The forecast is built from four public data services: Open-Meteo for weather and marine data, GBIF for species records, OpenStreetMap’s Overpass API for nearby marks, and Open-Meteo’s geocoder for place search. Your browser no longer calls them itself. It asks our own /api endpoints, which fetch the answer once and cache it at the edge so that everybody asking about the same stretch of coast is served the same copy. That is what keeps our use of GBIF and Overpass — both of which are donated infrastructure — proportionate.

The honest consequence is that a request now reaches a server of ours, and a server that answers a request unavoidably sees the IP address it came from and the coordinates it asked about. We do not log either. We do not build a profile, a session, or a history from them, and there is no account to attach one to. What is stored is the upstream’s own answer — a weather series, a list of piers — under a key made only of coordinates rounded to about a kilometre. That cache holds no request, no address and nothing that identifies who asked.

Coordinates are rounded before they are used as a cache key, which also means the cache cannot distinguish you from anyone else within roughly a kilometre. The upstream services now see our servers rather than you: they no longer receive your IP address at all.

If you press "use my location", the coordinates are read by your browser and used to build the forecast. They are sent to our /api endpoints for that purpose and to nothing else. The location also goes into the address bar so the page is shareable — which means a link you share contains where you were fishing. That is worth knowing before you post one.

The page also uses your browser’s sessionStorage to remember answers within a tab, so switching mode or pressing back does not re-request the same data. It is cleared when you close the tab and never leaves your device.

Cookies: two, both strictly necessary

If you pick a language from the switch, we store that choice in your browser so the site does not ask again. It holds one value — "en", "es" or "ca" — it is not shared with anyone, and under both the ePrivacy Directive and Spanish law a strictly necessary preference of this kind does not require consent. That is why there is no cookie banner.

We do not use analytics. If we ever add measurement, it will be a cookieless, aggregate-only tool with no cross-site tracking, and this page will say so before it is switched on.

The licence service: what we hold, and for how long

Controller. BCN Pesca. Contact: hello@sorstechnology.com.

What we process. Your full name, date of birth, nationality, the type and number of your passport, DNI or NIE, your email address and — if you give one — a phone number. We ask for the document *number*, never a photograph or a scan of the document itself. Where relevant, a parental authorisation or proof of disability. Nothing else.

Why, and on what basis. To file your recreational fishing licence application with the Generalitat de Catalunya. The lawful basis is performance of the contract you enter into with us (GDPR Article 6(1)(b)). Where we are legally required to keep accounting records, the basis is legal obligation (Article 6(1)(c)).

Who receives it. The Generalitat de Catalunya, as the issuing authority — that is the entire point of the service. Our payment provider processes the payment and never receives your identity document. We do not sell, rent or share your data with anyone else, and we do not use it for marketing.

How long we keep it. Your identity details are deleted within 30 days of delivering your licence. Invoice and transaction records are kept for the period Spanish commercial and tax law requires, and those records do not include your document number.

Where it is held. Within the European Economic Area. We do not transfer your data outside the EEA.

Your rights. You can ask for access, rectification, erasure, restriction, portability, or object to processing, by emailing hello@sorstechnology.com. If you believe we have handled your data badly, you can complain to the Agencia Española de Protección de Datos, and we would rather you told us first so we can fix it.

Legal notice and disclaimer

Site operator. BCN Pesca. Contact: hello@sorstechnology.com.

Independence. BCNPesca is an independent private project. It is not affiliated with, endorsed by, or acting on behalf of the Generalitat de Catalunya, the Ajuntament de Barcelona, the Ministerio de Agricultura, Pesca y Alimentación, or any other public administration.

Rules are summarised, not reproduced. The regulatory information on this site is a plain-language summary, written from the official sources cited on each section, and checked on the date shown. Rules change, and closed seasons and minimum sizes are revised periodically. The official text always prevails over anything written here. Nothing on this site is legal advice.

The forecast is a heuristic. The score is an angler’s rule of thumb, not a validated predictive model, and it is not fitted to any catch dataset. Weather and sea-state data come from third-party forecast models and can be wrong.

Safety. Fishing from breakwaters, rock armour and exposed shore is dangerous, and people die on this coast every year. You are responsible for your own assessment of conditions on the day. We accept no liability for decisions taken on the basis of this site.