Privacy Policy

1. The short version

This website sets no cookies, runs no analytics or tracking scripts, and makes no third-party requests.
We do not sell personal data, and we do not share it with advertisers or data brokers.
We never see your payment details. Purchases are handled by Apple, Google or Shopify.
Our apps keep your data on your device wherever the product allows it. TideTracker keeps everything locally and sends us nothing.
The only personal data we routinely hold is the email people choose to send us.

2. Who we are

Viking Media & Software is an independent studio that builds and publishes its own software, and is the data controller for the processing described here. Contact us about anything on this page at [email protected]. If you need postal details for a formal request, ask and we will provide them.

3. What this policy covers

This website, and any product we publish that does not have a privacy policy of its own.

Where a product has its own policy, that one governs it. TideTracker has its own Privacy Policy, because it handles health data and deserves to be described in detail rather than in general terms.

This policy does not cover Apple, Google, Shopify or any other third party. Their handling of your data is governed by their own policies.

4. This website

This site is made of static files. It sets no cookies, runs no analytics, embeds no trackers, and has no comment system, chat widget or advertising. There is no contact form — the only way to reach us from here is by email, which means nothing is collected unless you deliberately write to us.

It also makes no third-party requests at all. Fonts, styles, scripts and images are served from this domain, so loading a page here does not quietly tell Google, a CDN or anyone else that you visited. That is deliberate: a privacy page hosted on someone else's analytics would be a poor advertisement for the point it is making.

Our host may keep standard server logs, including IP addresses, for a short period for security and reliability. We do not use those logs to build any profile of you.

5. Email you send us

If you write to us we receive your email address, whatever you put in the message, and the ordinary technical headers any email carries. We use it to answer you and for nothing else. We do not add you to a mailing list, and we do not have one.

Our legal basis is our legitimate interest in replying to people who contact us, and performance of a contract where your message concerns something you bought.

6. Our apps

We design our products to hold as little of your data as the product allows, and to keep it on your device when it can. Across everything we publish:

We do not sell your data.
We do not share it with advertisers, ad networks or data brokers.
We do not use it to target advertising, in our products or anywhere else.
We do not use your content to train machine-learning models.

What an individual product records, and whether any of it leaves your device, is set out in that product's own privacy policy and in its App Store privacy label. TideTracker, for example, records everything locally, has no account and no server, and carries a "Data Not Collected" label.

7. Payments

We do not process payments and never see your card details. Purchases and subscriptions are handled by Apple, Google or Shopify depending on the product, each under their own privacy policy. We receive only enough to confirm that a purchase is valid so the software can unlock what you paid for.

We do not sell personal data. We share it only with:

Our email and hosting providers, who process it on our behalf under contract, purely so that mail reaches us and this site stays online.
App stores, for distribution and billing.
Authorities, where we are legally required to disclose — and we will tell you unless we are prohibited from doing so.
A buyer, if the business is ever sold or merged; this policy would continue to apply to data transferred.

Where a provider processes data outside your country, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

9. How long we keep it

Only as long as we actually need it, then we delete it. In practice that means correspondence is kept while it is useful for supporting you and for our own records of what we agreed, and deleted once it is not. Purchase and tax records are kept for as long as tax law requires. We do not keep personal data indefinitely "just in case".

10. Your rights

Depending on where you live, you have rights to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent. If you are in California, you also have rights to know what is collected, to have it deleted, and not to be treated differently for exercising them.

Email [email protected] and we will respond within one month, or tell you if we need longer. Given how little we hold, most requests are quick to satisfy.

You may also complain to your local data protection authority. In the EEA you can find yours through the European Data Protection Board; in the UK it is the Information Commissioner's Office.

11. Children

Our products are not directed at children, and we do not knowingly collect personal data from them. Some products set a higher minimum age, stated in their own terms and store listing. If you believe a child has given us personal data, contact us and we will delete it.

12. Security

This site is served over HTTPS. Our products use the platform's own protections — device encryption and secure key storage — and add their own where the data warrants it. We keep our dependencies current and limit who can reach what.

No system is perfectly secure. If a breach ever affects your rights, we will notify you and the relevant authority as the law requires.

13. Changes to this policy

We may update this policy. The "last updated" date above always reflects the current version. If we ever make a change that materially affects how your data is handled, we will say so plainly rather than quietly editing the page.

14. Contact

Privacy questions and data requests: [email protected]. It is the same address for everything else, and it is read by us.