Privacy Policy

Effective September 30, 2026

This policy describes the implemented Cutthroat Atlas website and browser app. It distinguishes information kept in your browser from requests and account information processed by hosted services.

Information in your browser

Saved Waters are private account data stored in the Atlas Accounts database using your Atlas account identifier and canonical water references, without saved map geometry or selected coordinates. Atlas keeps an account-scoped browser copy and pending changes for intermittent connectivity. Connected devices reconcile changes when you open or refresh Saved Waters; offline changes do not reach other devices until synchronized. Conflicting pending changes are applied in server acceptance order. Signing out hides the account copy without erasing its local bytes. Account Trips synchronize private names, dates, notes, logical water references and Saved Location IDs. They do not copy location coordinates or details. Notes, fishing history, previous browser-local plan records, preferences and offline map packages remain device-local. Saving a water does not download offline maps. Clearing site data removes local data and unsynchronized changes; synchronized Saved Waters can be restored by signing in.

Location features use your browser’s location permission. Atlas handles the precise location fix and map marker locally. Following your location changes the map view, so requested tiles, bounding boxes, or weather coordinates can reveal the surrounding area to providers. Browser and operating-system location services have their own network behavior.

Hosting, sign-in, and account processing

Cloudflare hosts the site and app. Visiting them sends requests to hosting infrastructure, including your IP address, browser headers, requested paths, and timing. Cloudflare Access may protect app entry. Hosted access and sign-in services process information outside the app’s local diagnostic log.

Atlas uses WorkOS for account authentication. A configured sign-in provider, such as Microsoft, can participate in that flow. Atlas uses secure HTTP-only cookies for its session and sign-in flow. Server-side account records include an account identifier, authentication-provider identifiers, account status, access entitlements, and access-change audit records. Authorized administration can look up verified account email through WorkOS to manage access. Saved Waters use separate authenticated, same-origin Atlas requests for synchronization. Account Trips synchronize through the same-origin Trips API; previous browser-local plan records remain untouched on this device. Saved Waters have no Product Updates linkage and are not used for behavioral analytics or public sharing. Account deletion is currently request-only: access is disabled and records remain pending further handling. Any future permanent erasure must include Saved Waters, Saved Locations, Trip records and item relations.

Signing out ends the session; it does not delete account records. Deleting local browser data or diagnostic logs does not delete server records. Settings > Account lets you request account deletion. The request disables Atlas account access and signs out this browser; server account and audit records remain pending further handling. It does not delete WorkOS or Cloudflare Access identities, Updates subscriptions, or local/offline data. No server/provider deletion timeline or retention period is specified.

Map, weather, and other service requests

Atlas requests data when you use features such as maps, weather, and stream conditions. Providers can receive IP addresses, browser headers, request timing, and geographic queries or viewed tile coordinates. A locally rendered map does not mean its source data was obtained without a network request. Cached resources can sometimes satisfy requests offline.

Mapbox optional performance metrics are disabled. Its service and session events remain: map.load, appUserTurnstile, style.load, map.auth (session API), Conditional SDK feature-usage metrics. Atlas does not send saved waters, notes, fishing history, trip history, Atlas account UUID, user identity to Mapbox. This is not a claim that Mapbox receives nothing.

The following service descriptions come from the same reviewed registry as the app’s network tool. They describe permitted connections, not a record of which services a particular visitor contacted. Some services are needed only for a selected feature or sign-in flow.

USGS National Map basemaps

Shaded relief, imagery and Editor topographic tiles.

Tile coordinates and zoom identify the viewed area.

USGS NAIP imagery

Aerial image requests for the viewed extent.

Bounding box, image dimensions and requested layers.

USGS map reference layers

Transportation, government boundaries, labels and contours.

Bounding box/point, layers and image dimensions.

USGS water observations

Gauge flow, temperature, turbidity, history, metadata and seasonal statistics.

Public gauge IDs, parameters, date ranges and query filters.

USGS NLDI

Upstream hydrology context for Runoff Watch.

Public hydrology identifiers, coordinates or navigation filters.

National Weather Service

Point/grid forecasts, observations and alerts.

Weather point coordinates, grid/station IDs, forecast and alert filters; viewport can follow device position.

NOAA radar

Radar metadata, WMS imagery and motion frames.

Viewed bounding box, time/frame, resolution and image dimensions.

USDA NRCS AWDB

Station snow, precipitation and temperature evidence for Runoff Watch.

Public station IDs, measurement types and time ranges.

USGS PAD-US on ArcGIS

Public ownership and land-manager boundaries.

Bounding box and feature query filters.

US Drought Monitor / University of Nebraska

Atlas server fetches regional drought statistics for /api/conditions/drought.

HUC8 watershed identifier and date range; server IP. Atlas receives the browser request; no user identity is forwarded upstream.

Mapbox rendering

Styles, tile metadata, vector/raster/elevation tiles, glyphs, sprites and SDK support assets when needed.

Public Mapbox token, SKU/session parameters, tile coordinates/zoom, style/font requests and browser metadata. Atlas personal records/identity are never added.

Mapbox session authorization

Official SDK session authorization and billing behavior.

Public token, SKU/session identifier, browser metadata.

Mapbox SDK service events

Map-load, turnstile, style-load and conditional feature-usage events from the unmodified SDK. Performance metrics are disabled.

SDK-generated anonymous/event/map/session IDs, timestamps, token/SKU and style/service metadata; IP/browser headers. Not an Atlas account UUID.

WorkOS identity API

Authentication codes/session credentials and identity data; Admin can send email lookup or WorkOS user ID. Server-only secrets stay server-side.

WorkOS hosted AuthKit

User-initiated hosted sign-in. Further hosted-page dependencies are not inspected by Atlas.

Cloudflare Access signing keys

Verify Admin Access JWTs against the exact deployment-configured Access issuer.

Server request for public signing keys; no Atlas fishing data.

Cloudflare Web Analytics / RUM (beacon)

Aggregate site usage and real-user performance measurement for Cutthroat Atlas.

Fetching the browser-side beacon sends request metadata to Cloudflare, including IP address, browser headers, timing and referrer subject to browser policy.

Cloudflare Web Analytics / RUM (submission)

Aggregate site usage and real-user performance measurement for Cutthroat Atlas.

Browser page-view and performance measurements are transmitted to Cloudflare through the current site’s /cdn-cgi/rum endpoint. Same-origin routing is not local-only processing; Cloudflare receives the request and associated network/browser metadata.

Microsoft identity for Updates mail

Client credentials token request at /{configured tenant UUID}/oauth2/v2.0/token. Source validates the tenant and client UUID and pins this suffix; the registry path prefix alone does not validate tenant authorization.

Server-side application client ID and secret, configured tenant, client_credentials grant and Graph .default scope. Access token stays server-only; no subscriber address is included.

Microsoft Graph Updates mail

Confirmation/rejoin, allowlisted operator tests and consent-based Product Updates from the fixed Updates mailbox under existing narrow Exchange application RBAC.

Bearer access token, recipient address, message MIME and functional confirmation/unsubscribe links. No opens, click tracking, advertising IDs or account correlation. Mailbox/provider retention applies.

Apple / Google Maps handoff

External vehicle navigation to the selected parking/access point.

Only the intended destination coordinate and driving mode. No origin, Trip or account identifiers, notes, water target or referrer. Provider retention applies.

Cloudflare Web Analytics / Real User Monitoring

Cutthroat Atlas uses Cloudflare Web Analytics / Real User Monitoring (RUM) to understand aggregate site usage and performance, such as page views, page loads, and browser performance metrics. This is optional product/site measurement and performance monitoring; it is not required for core map functionality.

Atlas does not use this service for advertising, ad targeting, or cross-site behavioral profiling. Aggregate site analytics is distinct from those activities.

The service uses a browser-side beacon loaded from static.cloudflareinsights.com and sends measurements over the network to /cdn-cgi/rum on the same site for our Cloudflare-proxied surfaces. Cloudflare states that Web Analytics does not collect or use visitors’ personal data. That statement does not mean there is no network transmission or that browser, device, or network metadata is invisible to Cloudflare.

When technically observable during an active diagnostic recording, the beacon and submission activity may appear as Cloudflare Web Analytics / RUM. The diagnostic log records service identifiers and counts, not request URLs or payloads. It cannot confirm every submission or delivery. Starting or stopping this optional log does not enable or disable site analytics.

Advertising and tracking

None: Atlas includes no advertising endpoints or advertising SDKs.

None: Atlas does not use cross-site behavioral profiling or behavioral tracking for advertising. Aggregate site usage and performance measurement through Cloudflare Web Analytics / RUM is disclosed below, along with Mapbox service usage/session events.

None: Atlas includes no automatic content recognition (ACR) or viewing tracking.

These statements do not remove the site analytics, hosting, authentication, map-provider, and service requests described above. The diagnostic log cannot observe all network activity; an empty log is not evidence that no communication occurred.

Optional diagnostic logs

Recording is off until you start a 24- or 48-hour window. A log stores service identifiers, counts, timestamps, and recording settings. It is capped at 16 KiB of compact JSON and 10,000 observations; collection can stop earlier if a queue fills or storage fails. It does not contain a full request archive or record your notes, locations, or account identity.

Temporary logs use this tab’s session storage. Closing the tab usually removes them, although session restore or duplicating a tab can preserve a copy. Saved-device logs use local storage shared by Atlas tabs in that browser profile. Reopening the tool or returning to the map continues the same authorized recording window without extending its deadline. A stopped recording stays stopped.

Stopping or reaching the deadline stops collection, not retention. Logs remain until you delete them or the browser clears storage. The Delete diagnostic logs control removes the saved log and the current tab’s temporary log, and invalidates temporary logs in other supported tabs when they resume. A small deletion marker prevents stale writes from restoring logs. Deletion cannot be confirmed if storage is unavailable. This action does not delete saved waters, notes, trips, accounts, or previously exported copies.

Sharing and downloads

Diagnostic logs are not automatically uploaded. You can preview a sanitized snapshot and explicitly download it or use the device share sheet. Atlas has no support-upload endpoint. Once you share a file, its recipient or selected app controls that copy; deleting the original log does not recall it. Other Atlas exports likewise require your action.

Open Privacy / Network Activity in Atlas to inspect the full permitted-destination registry and use diagnostic controls. App access is required where access protection applies. This public policy can be read without an Atlas account.