Privacy Policy
Last updated: June 23, 2026
1. Who we are
Locker9 is an independent, unofficial tool developed and operated by Primavera LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA ("we", "us", or "our").
Locker9 is not affiliated with, endorsed by, or connected to any cruise operator or their subsidiaries. It is an independent crew management tool built by a crew member for seafarers working on cruise ships.
For privacy-related questions, contact us at: info@locker9.link
2. What data we collect
When you create an account and use Locker9, we collect:
- ·Account data — your name, email address, and department/role.
- ·Contract data — ship assignments you enter: ship name, role, start and end dates.
- ·Certificate data — professional certifications you choose to add: name and expiry date.
- ·Financial data — salary entries, expenses, and remittances you voluntarily log. This includes amounts, currencies, and dates. We do not collect bank account details or payment card information.
- ·Push notification tokens — if you enable push notifications, we store your browser's push subscription endpoint to deliver alerts. You can revoke this at any time via Settings.
- ·Usage data — basic server logs (IP address, browser type, pages visited) retained by our infrastructure provider for security and debugging. We do not use this data for profiling or advertising.
We do not collect payment card information, biometric data, or any data from third-party sources.
3. Why we process your data (legal basis)
We process your personal data on the following legal bases under GDPR Article 6:
- ·Contract performance (Art. 6(1)(b)) — processing your name, email, and account data is necessary to provide the service you signed up for.
- ·Legitimate interests (Art. 6(1)(f)) — server logs are retained to maintain security and diagnose technical issues.
- ·Your consent (Art. 6(1)(a)) — contract and certificate data you voluntarily enter is processed solely to display it back to you and calculate your service statistics.
4. How we store your data
Your data is stored on servers operated by Supabase Inc. (our data processor), located in Frankfurt, Germany (EU). All data is encrypted in transit (TLS) and at rest.
Primavera LLC is based in the United States. As the data controller, we access your data only to provide support or resolve technical issues. Your data physically remains within the EU at all times.
We retain your data for as long as your account is active. When you delete your account, all your personal data is permanently deleted within 24 hours.
5. Who can see your data
By creating an account and accepting these Terms, you acknowledge and agree that your profile and current ship position are visible to all other registered Locker9 users, including crew members from different ships and departments.
Within Locker9, visibility works as follows:
- ·Your name, department, current ship, and next assignment are visible to all other logged-in crew members in the directory.
- ·Your contracts, certificates, and notes are visible only to you.
- ·The admin (the app operator) can view all profiles for technical support purposes.
We use the following third-party data processors:
- ·Supabase Inc. — database and authentication infrastructure. Data is stored in Frankfurt, Germany (EU). Privacy policy: supabase.com/privacy.
- ·Resend Inc. — transactional email delivery (account confirmation, password reset, onboarding emails). Your email address is shared with Resend solely to deliver these messages. Privacy policy: resend.com/legal/privacy-policy.
Both processors act strictly on our behalf and under our instructions. We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.
6. Cookies
Locker9 uses strictly necessary cookies only — specifically, a session cookie that keeps you logged in between page visits. This cookie contains no personal information beyond an encrypted session token.
Because this cookie is strictly necessary for the app to function, no cookie consent banner is required under ePrivacy Directive Article 5(3). We do not use analytics, advertising, or tracking cookies.
7. Your rights under GDPR
If you are located in the EU/EEA, you have the following rights:
- ·Right of access — request a copy of all personal data we hold about you.
- ·Right to rectification — correct inaccurate data directly in your profile, or contact us.
- ·Right to erasure — delete your account and all associated data at any time via Settings → Delete account.
- ·Right to data portability — request an export of your data in a machine-readable format.
- ·Right to object — object to processing based on legitimate interests.
- ·Right to lodge a complaint — with your national data protection authority. If you are in Germany, this is the BfDI (bfdi.bund.de).
To exercise any right, contact us at info@locker9.link. We will respond within 30 days.
8. Children
Locker9 is intended solely for working adults employed in the cruise industry. We do not knowingly collect data from anyone under the age of 18.
9. Changes to this policy
We may update this Privacy Policy as the app evolves. We will notify registered users of material changes via the app. The "Last updated" date at the top of this page always reflects the current version.