Privacy Policy

Last updated: 27 October 2026

This policy explains how Cruise-Ship.info uses personal information when you read cruise guides, create an account, publish reviews, ask questions, send messages or arrange onboard meetups.

1. Who is responsible and how to contact us

Cruise-Ship.info is published by Helpoffice, SA, registered under SIRET 91819176800012, with its registered office at 1270 Route de Trets, 83910 Pourrières (Var), France. Helpoffice is responsible for the personal-data processing described in our Privacy Policy.

Publication director: Kamel Belgacem. You can write to Helpoffice at the address above, marked “Cruise-Ship.info — Privacy / Support”, or contact Kamel Belgacem on LinkedIn or the official Okcroisiere LinkedIn page. Do not post private account details in a public LinkedIn comment.

2. Information we collect

• Account details: your email address, name or display name, username, password hash if you choose a password, account dates, and the recorded date of acceptance of our registration rules. We do not store your password in readable form.
• Optional profile information: the biography, photographs, social links, cruise preferences and cruise history you choose to add.
• Community activity: reviews, ratings, questions, posts, comments, uploaded photographs, likes, friendships, blocks, reports, messages, meetup details and participation.
• Service and security information: login and verification events, session identifiers, requests to change or delete an account, notification preferences and technical request information. Our server and service providers may process IP addresses, browser details, requested URLs and error logs to deliver and protect the service.

Account identifiers and the information needed to verify access are required for a member account. Additional profile details and contributions are optional. Avoid publishing booking references, cabin access details, financial information or another person's private information.

3. Signing in with Google

Google sign-in is optional; you can also register with email. If you choose Google, we request the openid, email and profile permissions. Google supplies an account identifier, email address and verification status, and basic profile information such as your name. Its response may also contain a profile-picture URL or organisation domain.

We use the Google account identifier, verified email and name to identify you, create or link your member account and sign you in. The current Google integration does not import your Google profile picture. We do not request access to Gmail messages, contacts, Google Drive files or calendars.

The linked Google identifier, email, display name and connection dates are stored with your member account. Temporary sign-in verification information is held in your session; Google sign-in and pending signup confirmations expire after ten minutes. We do not store Google access or refresh tokens for ongoing access to your Google account.

We do not sell Google user data, use it for advertising, or use it to train artificial-intelligence models. You can remove this site's access in your Google account connections. Revoking access does not by itself delete your Cruise-Ship.info account or its contributions; use the account-deletion process below for that. Google's own processing is described in the Google Privacy Policy.

4. Why we use your information

• Providing the service and taking steps at your request: creating and authenticating your account, maintaining your profile, publishing your contributions, delivering messages and arranging meetups. The legal basis is performance of our agreement with you.
• Protecting the community and operating the website: preventing account abuse, handling reports, moderating content, investigating errors and protecting our rights. We rely on our legitimate interests in providing a reliable and safe service, balanced against your rights.
• Meeting legal duties: handling applicable data-protection requests and responding to legally binding requests. The basis is compliance with the relevant legal obligation.
• Optional uses requiring consent: where we introduce an optional use requiring your agreement, we will explain it and obtain consent before that use. You can withdraw such consent without affecting earlier lawful processing.

If you request our newsletter, we send a confirmation email before adding your address to our Brevo mailing list. We record your request and confirmation to manage the subscription. Unconfirmed requests expire after 24 hours and are removed during subsequent signup processing. You can unsubscribe using the link in each newsletter. We use request limits and a hidden form field to reduce automated abuse.

Essential confirmation and account-security emails are part of operating your account. Community notifications follow the preferences available in your account. Accepting the Terms of Use is not consent to marketing.

5. Who can see information

Published reviews, ship questions and a public profile preview may be visible to visitors and search engines. Additional profile details and community features are available to signed-in members. Your chosen display name and contributions may reveal your identity. Consider carefully before sharing a sailing date or meetup location.

Private messages are intended for their participants and are not public posts. They are stored by the service; we do not offer end-to-end encrypted messaging. Authorised staff may access relevant records when necessary for support, moderation, security or a legal requirement.

Authorised administrators and service providers receive only the information needed for their roles. These include website hosting and technical infrastructure, Google when you choose Google sign-in, and Brevo for transactional email delivery and confirmed newsletter subscriptions when enabled. Email delivery may involve your email address, name and the content of the service email. We do not sell your personal information.

6. Cookies, external resources and international processing

We use a session cookie to keep you signed in, protect forms and remember progress through signup. It is a session cookie rather than a persistent “remember me” cookie; your browser's session-restoration settings may affect when it is removed. Blocking necessary cookies prevents account features from working.

Text uses the fonts installed on your device. The main interface styles, scripts and icon fonts are served by this website. Some optional tools may load resources from external content-delivery networks. Ship tracking and some embedded media involve external providers, including VesselFinder. Loading these resources can disclose technical information such as your IP address and browser details to those providers. Following a LinkedIn link takes you to a separately operated service. Their own privacy policies apply to their processing.

Some external providers operate internationally and may process information outside the European Economic Area. Where Helpoffice arranges such a transfer, applicable data-protection safeguards are required, such as an adequacy decision or appropriate contractual safeguards. You can contact us for information about the providers and safeguards applicable to your data.

7. How long information is kept

Account and community records are kept while they are needed to provide your account and the features you use. You can edit or remove contributions through the available controls and request account deletion. Deletion disables access and hides the principal contributions first; an administrative purge then removes the account and associated records and files. It is not an instant erasure of every server copy.

Email signup links expire after one hour. Expired signup-request records become eligible for cleanup seven days after expiry; that cleanup runs when a new signup request is processed. Google signup confirmation expires after ten minutes. A link's expiry ends its use for authentication and does not necessarily delete the related record immediately.

Security records, deletion-request records and backup copies may need to remain for a limited period according to their security purpose, backup rotation or a specific legal requirement. They must not be retained longer than necessary for that purpose. Information needed for a legal claim may be retained for the applicable limitation period. Contact us for the retention information applicable to a particular record.

8. Your rights and account deletion

Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability of your personal information. You may object to processing based on legitimate interests and withdraw consent where consent is the basis. French law also allows instructions concerning your personal data after death.

Use Manage my account to request account deletion, or contact Helpoffice using the details above if you cannot sign in or wish to exercise another right. Revoking Google access and deleting your website account are separate actions. We may request proportionate evidence of identity where necessary to protect your account. We normally respond within one month; where the law permits an extension, we will explain it.

You can complain to the CNIL, the French data-protection authority, or the supervisory authority in your country of residence.

9. Changes to this policy

We will update this page when our practices change and display the revision date. Material changes will be brought to your attention through an appropriate notice. A new purpose requiring consent will not be authorised merely by changing this page.