Privacy policy

The short version

Looking up places needs no account. If you create an account we store your email address and either a password hash or your Google identity, plus the places you save. Your location is used only in your browser to show distances; it is never sent to us. We do not sell data, send marketing email or take payments. Whether analytics cookies are set depends on how this site is configured; see “Analytics and statistics”.

What we collect

Without an account:

• An anonymous session: a random identifier (kept in the ll_session cookie) and a security token that protects forms. The server stores only a hash of the identifier.
• Search words and filters you type appear in the page address, like any web request. The site does not keep a search history.
• A suggestion, if you send one: the page it refers to, the category, your message (up to 1,000 characters) and the time. It is not linked to your account or session. Please do not include personal information.

With an email account:

• Your email address (stored in lower case) and a salted scrypt hash of your password. We never store the password itself.
• The account creation time and whether the email is confirmed.
• Verification codes and password reset tokens, stored only as hashes (see “How long we keep data”).
• The places you save and when you saved them.

With Google sign-in:

• Google’s stable identifier for your account and the email address Google reports as confirmed. We request the openid, email and profile permissions but store only those two values; Google tokens are discarded and your name and photo are not stored.
• If an account with the same confirmed email already exists, the Google identity is attached to it. Otherwise the first Google sign-in creates a new account.

Your location

“Use my location” asks your browser for your position. If you allow it, the position stays in this browser tab (sessionStorage) and is used only to calculate straight-line distances on the page. It is not sent to our server, not stored in your account and not shared. Sorting by distance downloads the coordinates of listed places and sorts them in your browser. “Clear” or closing the tab removes it.

Data sources

The place information on this site is compiled from open data and public records. We restate facts in our own words, and each listing shows when it was last checked.

• OpenStreetMap: names, locations, addresses, opening hours, phone numbers, websites and dog tags for beaches, pubs, cafés and dog fields. © OpenStreetMap contributors, available under the Open Database Licence (ODbL), https://www.openstreetmap.org/copyright.
• Council dog-control orders: beach dog rules (season dates, hours and zones) come from the orders that coastal councils publish. Many councils publish these under the Open Government Licence, and we follow each council’s terms. Rules are seasonal and can change, so always check the signs on arrival.
• Bathing water and food business records: beach names and locations are cross-checked with designated bathing water lists, and addresses of pubs and cafés with Food Standards Agency open data (Open Government Licence). We do not use these to decide whether dogs are allowed.
• Map tiles: OpenFreeMap, built from OpenStreetMap data. © OpenMapTiles © OpenStreetMap contributors. The attribution also appears on the map itself.

How often it is refreshed: listings are refreshed from OpenStreetMap over time, and each listing shows its “Last checked” date. Beach rules are re-checked every March, before seasonal restrictions start.

To report a correction, use “Suggest an update” on any listing or the Contact page. Listing owners can ask for a change the same way, and you can also correct the underlying map on OpenStreetMap.

Why we use it

We do not use your data for marketing email. Saving a place does not contact the place or anyone else.

• To create and secure your account, sign you in, and send the one-time code or reset link you ask for.
• To keep your saved places.
• To protect the site: rate limits use hashed identifiers, and forms require a security token.
• To count aggregate usage (see “Analytics and statistics”) and to review update suggestions by hand.

Who processes data

• Mail delivery: to send a verification code or password reset link, the site sends your email address and the code or link to the operator’s mail-delivery service (a self-operated mail workbench). It also receives short business events (for example “registration completed”) that carry an internal account number and no email address.
• Google: if you choose Google sign-in, your browser goes to Google and Google returns your confirmed identity. If analytics is enabled and you have not opted out or declined, Google Analytics also receives page views. Google handles that data under its own policies.
• Site statistics service: the site can send the operator’s own statistics service one daily aggregate (registration count, total and enabled accounts) with the site identifier and domain. It contains no email address, user identifier, IP address or page content.
• Maps: when a page shows a map, your browser loads map tiles from OpenFreeMap, which receives the usual request data (such as your IP address). Your shared location is not sent with these requests.
• Hosting: the site software can write a technical request log (time, method, path, status, duration, request id; no query string, cookie or IP address). The server or network that hosts it may keep its own standard logs.
• Links to venue and field websites and to maps open third-party services with their own privacy policies.

Advertising

Some pages reserve clearly labeled advertising spaces. No advertising network is connected at the moment, so these spaces are not shown and set no cookies. If that changes, this policy will be updated before any advertising is shown.

Cookies and browser storage

These are all the cookies and storage keys the site sets.

Analytics and statistics

Analytics is enabled on this site and is on by default. By visiting and using this site you agree to Google Analytics cookies being set in your browser (see the cookie table for names, purpose and duration). Google Analytics receives page-view data (page path, language, browser and approximate location) to produce visit statistics. You can opt out at any time with the control below.

How long we keep data

• Sessions last 7 days and are deleted when you sign out, reset your password or delete your account. Expired rows are removed by a clean-up that runs every 10 minutes.
• Registration codes are valid for 10 minutes with at most 5 attempts; password reset links are valid for 30 minutes and work once. They are stored only as hashes.
• Mail waiting to be sent holds your address and the code or link until it is delivered, then is deleted. Mail that cannot be delivered, or that has expired, has the address and content erased, and its record is removed after 7 days.
• Your account, saved places and Google link are kept until you delete the account.
• Update suggestions are kept for manual review. Daily aggregate counters contain no personal data and are kept.
• If the operator keeps backup copies of the database, a deleted account can remain in those copies until they are replaced or deleted.

Your choices and rights

You can delete your account yourself: sign in, open Me, and use “Delete my account”. You confirm with your password (or, for an account without a password, by typing your email address within 10 minutes of signing in with Google). Deletion removes your account, sessions, saved places, codes and reset tokens, your Google link and any waiting mail addressed to you. It cannot be undone.

For any other request about your data, such as a copy or a correction, use the Contact page. We will look at the request; we do not promise a particular legal outcome.

You can change your analytics choice at any time with the control in “Analytics and statistics”, and you can clear cookies and tab storage in your browser.

Children

This site is not directed to children and is not designed for them to create accounts. If you believe a child has an account, contact us through the Contact page and we will delete it.

Changes to this policy

We may update this policy when the site changes. The date at the top shows when it was last updated. See also the Terms of use.