What the register holds
This product holds very little, because it can do very little. There is no analytics, no third-party pixel and no tracking cookie, so most of what follows is short. Every row below is rendered from the same file the code reads, so this page cannot quietly fall out of date.
Waenerlund Holding AB
operating BoatMarkets, from Stockholm, Sweden.
hello@boat-markets.com
The full company block is on who we are.
Everything we hold about a person
7 kinds of data, and that is all of them. Two can be given to us with no account at all, and those are marked.
One signed cookie holding your account id, when you are signed in.
- WHY
- It is what keeps you signed in. There is no other way to know a page request is yours.
- BASIS
- Necessary to do the thing you asked for (Art. 6(1)(b))
- KEPT
- Until you sign out, or 30 days, whichever comes first. Signing out deletes it.
The display name you chose, and an email address if you gave us one.
- WHY
- So a listing can have an owner, and so you can find your own listings again.
- BASIS
- Necessary to do the thing you asked for (Art. 6(1)(b))
- KEPT
- Until you delete the account. /account/privacy shows the plan before you confirm it.
A message you send to a seller, and — where the channel allows it — a reply address.
NO ACCOUNT NEEDED- WHY
- To pass an inquiry to the person selling the boat.
- BASIS
- Necessary to do the thing you asked for (Art. 6(1)(b))
- KEPT
- Until the seller deletes it or their account is erased.
What you are looking for, your budget, and an alert address if you gave one.
NO ACCOUNT NEEDED- WHY
- To show sellers what buyers are asking for, and — one day — to tell you when a match appears.
- BASIS
- Necessary to do the thing you asked for (Art. 6(1)(b))
- KEPT
- 90 days, then it expires by itself. You can delete it sooner.
A salted, truncated SHA-256 of your network address. Never the address itself.
NO ACCOUNT NEEDED- WHY
- To stop one caller from publishing a thousand adverts, or putting a number of their choosing on a listing's interest count. It cannot be reversed to an address, and it is not used to recognise you.
- BASIS
- Legitimate interest (Art. 6(1)(f))
- KEPT
- In memory only, for as long as the rate-limit window — an hour at most, and gone when the server restarts.
What you bought, what it cost, the tax and the country we charged it in.
- WHY
- It is a record of a payment. Bookkeeping law requires it to survive even a deletion request.
- BASIS
- Required by law (Art. 6(1)(c))
- KEPT
- Bokföringslagen (1999:1078) 7 kap. 2 § — 7 years counted from the end of a financial year.
The timeline on a listing: what changed, when, and which version.
- WHY
- The timeline IS the trust product — a buyer can see a price move rather than being told about it.
- BASIS
- Legitimate interest (Art. 6(1)(f))
- KEPT
- Forever, and deliberately. It holds NO personal data: a deletion request severs the listing from its owner and tombstones the name, and never removes a timeline row.
What we never collect
- No tracking cookies. Exactly one cookie exists and it is the sign-in one above.src/lib/auth/session.ts, and a source scan asserts nothing else sets a cookie
- No analytics, no third-party pixel, no advertising network, ever.no such dependency exists in package.json
- No selling or sharing of buyer data. Not to sellers, not to brokers, not to anyone.Law 3 — src/lib/billing/catalog.ts NEVER_SOLD
- No personal number, and no document scan, even when electronic-ID sign-in lands.src/lib/auth/signicat.ts states what it would and would not store
- No personal data in a listing record. Contact details are scrubbed out of an advert as it is read.scrubPii() in src/lib/pipeline/rules.ts, and a PII denylist test over listing_events
In demo mode — which is what this site runs today — everything above lives in the memory of the server process and disappears when it restarts. Nothing is written to a database, because no database has been connected. In live mode it will live in a Supabase Postgres instance in Frankfurt, inside the EU, and this sentence will be updated on the day that is true rather than before it.
Nothing is transferred outside the EU/EEA, because nothing is transferred anywhere. There are no processors: no analytics provider, no email provider, no content delivery of anything but our own code. When a payment provider and an email provider are connected, each will be named here with what it receives, before it is switched on.
What you can make us do
See everything we hold about you (Art. 15) and take it elsewhere (Art. 20)
There is a button on /account/privacy. It produces a JSON file, immediately.
Have it deleted (Art. 17)
Also on /account/privacy. It shows you the exact plan — what is severed, what is kept and why — before you confirm anything.
Correct something that is wrong (Art. 16)
Your own details are editable in /account/settings. For anything else, write to us.
Object to processing based on legitimate interest (Art. 21)
Write to us. The only two such rows are the rate-limit hash and the listing timeline.
NO BUTTON FOR THIS ONE YET · HANDLED BY WRITING TO US
Complain to a supervisory authority
Integritetsskyddsmyndigheten (IMY) in Sweden, or the authority where you live.
NO BUTTON FOR THIS ONE YET · HANDLED BY WRITING TO US
Reporting an illegal or fraudulent listing
Use the contact address below and say which listing, in one sentence, and why. Every listing has an id in its URL — that is enough to find it. A listing that trips our fraud screen is already held as a draft rather than published, and a report about one that did not is how the screen gets better.
Last changed 31 July 2026. This notice is our own reading of the regulation applied to what the code actually does. It has not been reviewed by a lawyer, and we would rather say that than let the formatting imply otherwise.