Privacy Policy

The short version

Durango Fly Company is a small online business in Durango, Colorado. We collect what we need to run the site: your email if you make an account or join the waitlist, what you save in the Trout Bot app, and order details if you buy something. We do not sell your information, and we do not run ads. A handful of outside services help us run the site, and each one is named below with what it receives.

What we collect, and why

• Your email address, when you make an account, join the waitlist, or send a message through the contact form. We use it to sign you in, to answer you, and to tell you when the reports and shop open.
• What you save in the Trout Bot app: favorite flies, favorite waters, your trip log, and the text of your conversations with Trout Bot. This is stored so the app works the next time you open it. We also keep a count of how many questions you ask Trout Bot each day, so the daily limit works. The count is a number only, and it is deleted with your account.
• Subscription status. Whether you are a subscriber and when the paid period ends. We do not see or store your card number.
• Order details, once the fly shop opens: what you bought, your name, and your shipping address, so we can ship it.
• How the site is used: pages viewed, the kind of device, and a rough location such as a city. This comes from Google Analytics and from our host's server logs.

What we never keep

Photos you send to Trout Bot are not stored. Your browser shrinks the photo, it is sent once so the assistant can look at it and answer, and it is gone. Your conversation history records only that a photo was attached, not the photo itself. We never see or store payment card numbers. Those go straight to Stripe.

Outside services that receive data

• Supabase hosts our database and sign in. It stores your email, your account, what you save in the app, waitlist entries, and orders.
• Stripe handles every payment. When you subscribe or check out, Stripe receives your name, email, card details, and, for fly orders, your shipping address. Stripe tells us whether the payment went through and, for orders, where to ship.
• Resend sends our email: the sign in links, replies to the contact form, and two notices to the waitlist: one when the site opens and one when report subscriptions open. It receives your email address and the content of those messages. We do not send a newsletter. The reports live on the site.
• Google Analytics measures visits. It receives the pages you view, your device and browser type, a rough location, and it sets cookies to tell visits apart. It does not receive your name, email, or anything you type into the site.
• YouTube. Our videos are hosted on YouTube. The home page shows only a still image of each video, loaded through our own server. YouTube is contacted only if you press play, using its privacy enhanced player, and at that point YouTube receives your IP address and may set its own cookies.
• Anthropic provides the AI model behind Trout Bot. Your question, the recent conversation, and any photo you attach are sent to Anthropic to produce the answer. Your name and email are not sent. When Trout Bot searches the web, the search runs through Anthropic as well.
• Vercel hosts the website. Like any web host, its servers log the IP address and browser of each request for a short time, for security and troubleshooting.

River flows and weather come from public government sources (USGS, the Colorado Division of Water Resources, and the National Weather Service). Those requests come from our server and carry nothing about you.

Cookies and what sits in your browser

• One cookie keeps you signed in. It is shared between the website and the Trout Bot app so you sign in once.
• Google Analytics sets its own cookies to count visits.
• Your cart, and whether you have dismissed a notice, are kept in your own browser and never sent to us until you check out.

You can block Google Analytics with Google's opt out browser add on or any content blocker. The site works the same without it.

How long we keep things

Account data stays until you ask us to delete it. Order and payment records are kept as long as tax and accounting rules require. Waitlist emails are deleted after the second of those two notices goes out, unless you have made an account. Reply to either notice with the word remove and we stop emailing you.

Deleting your data

Email hello@durangoflycompany.com from the address on your account and ask. We will delete your account, trip log, favorites, and Trout Bot conversations within 30 days and confirm when it is done. You can clear your Trout Bot conversation yourself at any time from the chat page. Payment records held by Stripe are kept as the law requires.

Children

The site is not meant for children under 13, and we do not knowingly collect their information.

Changes

If what we collect or who receives it changes, this page changes first, and the date at the top changes with it.

Contact

Questions about any of this: hello@durangoflycompany.com, or the contact page. See also our Terms. By mail: