Last updated: 2026-05-08
Portship ("Portship," "we," "us," or "our") respects your privacy. This policy explains what we collect, why, how we use and protect it, who we share it with, and the rights you have. It applies to portship.app and all related services.
Portship is a sole proprietorship operating under the registered trade name "Portship" in the Commonwealth of Virginia, United States, and is the party responsible for your personal data (the "data controller" under the GDPR and UK GDPR). You can reach us at privacy@portship.app.
We collect only what we need to run the service:
For California disclosure purposes, the categories above correspond to: identifiers, customer account records, commercial information, internet/network activity, coarse geolocation, and user-generated content. We collect these directly from you, automatically through your use of the service, and (for payment confirmation) from Stripe. We do not collect sensitive personal information as defined under the CPRA, and we do not collect it for any purpose that would trigger the right to limit its use.
Platform and category counters are stored using SHA-256 hashed identifiers. No emails, slugs, or labels are stored in this aggregate market-data layer. This data is de-identified and used only to understand platform-level trends.
We use your data to:
The display name, headline, skill chips, and projects you choose to make public on your portfolio (portship.app/@you) are shown publicly and, when your portfolio is public and has at least one live project, may be indexed by search engines. You can make your portfolio private (link-only) at any time from your account settings.
We use a single session cookie for authentication. We use no advertising, marketing, or third-party tracking cookies, and we do not track you across other websites.
We share data only with the service providers required to operate Portship:
Each processes data only on our instructions and under its own data-protection commitments. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
We retain account data while your account is active. You can delete your account at any time from your account page, which wipes your routes, analytics, handle, and profile. Handles are tombstoned for 90 days after deletion to prevent impersonation. De-identified aggregate data, which can no longer be linked to you, may be retained.
We protect your data with industry-standard measures, including password hashing (bcrypt), encryption of data in transit (SSL on every link and page), and access controls limiting who can reach your information. No system is perfectly secure, but we work to safeguard your data and to limit what we collect in the first place.
Portship is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, email privacy@portship.app and we will delete it.
Depending on where you live, you may have the right to: access the data we hold about you; correct inaccurate data; delete (erase) your data; restrict or object to certain processing; obtain your data in a portable format; and withdraw consent at any time where processing is based on consent.
California residents have these rights under the CCPA/CPRA, including the right to know the categories and specific pieces of personal information we collect, the right to deletion, the right to correct, and the right to non-discrimination for exercising these rights. You may use an authorized agent to make a request on your behalf. As stated above, we do not sell or share your personal information for cross-context behavioral advertising, and we do not use sensitive personal information in ways that trigger the right to limit.
EU, UK, and Swiss residents have equivalent rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local data-protection authority.
You can exercise access, deletion, and portability for most data immediately from your account page. For any other request, email privacy@portship.app and we will respond within 30 days (extendable where the law allows, with notice to you).
Portship is operated from the United States. If you access the service from outside the US, your data will be transferred to and processed in the US. For users in the European Economic Area, the United Kingdom, or Switzerland, such transfers are made under the Standard Contractual Clauses where required.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects about you.
We may update this policy as the service evolves or the law changes. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice (such as by email or an in-app message) before the change takes effect.
For privacy questions or to exercise the rights above, email privacy@portship.app. To report abuse (phishing, malware, impersonation, or other policy violations), email abuse@portship.app. For general support, email support@portship.app. Portship is operated under the laws of the Commonwealth of Virginia, United States.