Last updated: January 14, 2026
DriftLine Co. LLC ("DriftLine Co.," "Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the DriftLine mobile application ("App"). By accessing or using the App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy and our Terms of Use.
IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE THE APP.
The following table describes the categories of personal information we may collect, as defined under various U.S. state privacy laws:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Email address, device identifiers, IP address | Yes |
| Customer Records | Name, address, phone number, payment info | Phone number only |
| Protected Classifications | Race, religion, sexual orientation, disability | No |
| Commercial Information | Purchase history, products/services obtained | No |
| Biometric Information | Fingerprints, face recognition, voiceprints | No |
| Internet/Network Activity | Browsing history, App interactions, logs | Limited |
| Geolocation Data | Precise GPS location (with consent) | Yes* |
| Sensory Data | Audio, visual, thermal, olfactory | Photos only** |
| Professional/Employment | Job title, employer, work history | No |
| Education Information | School records, grades | No |
| Inferences | Profiles reflecting preferences, behavior | No |
| Sensitive Personal Information | SSN, financial accounts, precise geolocation, health data, racial/ethnic origin | Geolocation only* |
* Precise geolocation is collected only with your explicit consent and only while actively using the App. We do not store location history.
** Photos are collected only if you voluntarily upload them to the catch log feature.
Under various state privacy laws, precise geolocation is considered "sensitive personal information." We collect precise geolocation only with your explicit opt-in consent and use it solely to provide location-based features within the App. We do not use sensitive personal information for profiling, advertising, or any purpose beyond providing the core App functionality you requested.
We collect personal information from the following sources:
We do NOT purchase personal information from data brokers or collect information from third-party sources about you.
We use the information we collect for the following business purposes:
Important: DriftLine Co. does NOT sell, share, or rent your personal information to third parties for monetary or other valuable consideration. We do NOT engage in targeted advertising or cross-context behavioral advertising.
We process your personal information based on the following legal grounds:
Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal. To withdraw consent:
DriftLine Co. does NOT sell your personal information. We have not sold personal information in the preceding 12 months and do not have plans to sell personal information in the future.
DriftLine Co. does NOT share your personal information for cross-context behavioral advertising or targeted advertising purposes.
We may disclose your information only in the following limited circumstances:
| Recipient Category | Purpose | Categories of PI Disclosed |
|---|---|---|
| Cloud Service Providers (AWS) | Data hosting and storage | Identifiers, user content, usage data |
| Push Notification Services (Expo) | Delivering push notifications | Device tokens only |
| Map Services (Mapbox) | Map display functionality | Anonymous usage metrics |
| Legal/Government Authorities | Legal compliance, law enforcement | As required by law |
| Professional Advisors | Legal, accounting, audit services | As necessary for services |
| Business Transferees | Merger, acquisition, or sale | All categories (with notice) |
All service providers who receive personal information are contractually required to:
We may disclose personal information if required or permitted by law, including:
The App integrates with the following third-party services. Each operates under its own privacy policy, which we encourage you to review:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting and storage | Account data, catch logs (encrypted) | AWS Privacy |
| Mapbox | Map display and navigation | Anonymous telemetry per their policy | Mapbox Privacy |
| Expo | Push notification delivery | Device push tokens only | Expo Privacy |
| USGS Water Services | River flow data | No personal data shared | Government public data |
| Water Survey of Canada | Canadian river flow data | No personal data shared | Government public data |
| NOAA NWRFC | Forecast data | No personal data shared | Government public data |
| Stormglass.io | Marine weather, tides, astronomy | Anonymous location coordinates for weather lookup | Stormglass Privacy |
| WDFW / Data.WA | Fishing regulations, fish stocking data | No personal data shared | Government public data |
| USDA NAIP (via Mapbox) | Aerial imagery | No personal data shared | Government public data |
We are not responsible for the privacy practices of third-party services. When you interact with these services, their privacy policies govern.
Your data is stored securely using Amazon Web Services (AWS) infrastructure located in the United States (specifically, the us-west-2 region). By using the App, you consent to the transfer and storage of your information in the United States.
We implement industry-standard technical, administrative, and physical security measures including:
However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You acknowledge and accept this inherent risk when using the App.
| Data Type | Retention Period | Deletion Trigger |
|---|---|---|
| Push Notification Tokens | 12 months | Automatic after inactivity |
| Account Data (email, phone number) | Until deletion request or 24 months of inactivity | User request or inactivity |
| Catch Log Data | Until deleted by user or account deletion | User-initiated deletion |
| Catch Log Photos | Until deleted by user or account deletion | User-initiated deletion |
| Hunting Journal Data | Until deleted by user or account deletion | User-initiated deletion |
| Hunting Journal Photos | Until deleted by user or account deletion | User-initiated deletion |
| App Preferences/Settings | Until account deletion | Account deletion |
| Server Logs (IP, access) | 90 days | Automatic rotation |
| Crash Reports | 12 months | Automatic deletion |
| Anonymized Analytics | Indefinite | Not deleted (no personal info) |
Upon account deletion, we will delete or anonymize your personal information within 45 days, except as required to comply with legal obligations, resolve disputes, or enforce our agreements.
Regardless of your location, all DriftLine Co. users have the following rights:
To exercise any of these rights, contact us at info@getdriftline.com.
You can delete your account and all associated data at any time using one of these methods:
Your account and all associated data (catch logs, trip notes, photos, preferences) will be permanently deleted immediately.
If you cannot access the app, you may request account deletion by emailing:
Please include the email address associated with your account. We will process your request within 3 days and confirm deletion.
Note: Deletion is permanent and cannot be undone. Anonymized analytics data that cannot be linked to you may be retained.
This section provides additional disclosures required under various U.S. state privacy laws. If you are a resident of any of the following states, you may have additional rights as described below.
Applicable Law: California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
If you are a California resident, you have the following rights:
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority.
Verification: We will verify your identity before fulfilling requests by matching information you provide with information we have on file.
Response Time: We will respond within 45 days of receiving a verifiable request, with one 45-day extension if necessary.
Shine the Light: California Civil Code Section 1798.83 permits California residents to request information about disclosure of personal information to third parties for direct marketing. We do not disclose personal information for direct marketing purposes.
To Submit a Request: Email info@getdriftline.com with "California Privacy Request" in the subject line.
Applicable Law: Virginia Consumer Data Protection Act (VCDPA) - Effective January 1, 2023
If you are a Virginia resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days. If the appeal is denied, you may contact the Virginia Attorney General at oag.state.va.us.
To Submit a Request: Email info@getdriftline.com with "Virginia Privacy Request" in the subject line.
Applicable Law: Colorado Privacy Act (CPA) - Effective July 1, 2023
If you are a Colorado resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 45 days. If the appeal is denied, you may contact the Colorado Attorney General at coag.gov.
To Submit a Request: Email info@getdriftline.com with "Colorado Privacy Request" in the subject line.
Applicable Law: Connecticut Data Privacy Act (CTDPA) - Effective July 1, 2023
If you are a Connecticut resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days. If the appeal is denied, you may contact the Connecticut Attorney General at portal.ct.gov/AG.
To Submit a Request: Email info@getdriftline.com with "Connecticut Privacy Request" in the subject line.
Applicable Law: Utah Consumer Privacy Act (UCPA) - Effective December 31, 2023
If you are a Utah resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
To Submit a Request: Email info@getdriftline.com with "Utah Privacy Request" in the subject line.
Applicable Law: Texas Data Privacy and Security Act (TDPSA) - Effective July 1, 2024
If you are a Texas resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We will honor universal opt-out mechanisms beginning January 1, 2025.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days. If the appeal is denied, you may contact the Texas Attorney General.
To Submit a Request: Email info@getdriftline.com with "Texas Privacy Request" in the subject line.
Applicable Law: Oregon Consumer Privacy Act (OCPA) - Effective July 1, 2024
If you are an Oregon resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 45 days. If the appeal is denied, you may contact the Oregon Attorney General.
To Submit a Request: Email info@getdriftline.com with "Oregon Privacy Request" in the subject line.
Applicable Law: Montana Consumer Data Privacy Act (MCDPA) - Effective October 1, 2024
If you are a Montana resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Montana Privacy Request" in the subject line.
Applicable Law: Delaware Personal Data Privacy Act (DPDPA) - Effective January 1, 2025
If you are a Delaware resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by January 1, 2026).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Delaware Privacy Request" in the subject line.
Applicable Law: Iowa Consumer Data Protection Act (ICDPA) - Effective January 1, 2025
If you are an Iowa resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 90 days.
To Submit a Request: Email info@getdriftline.com with "Iowa Privacy Request" in the subject line.
Applicable Law: Nebraska Data Privacy Act (NDPA) - Effective January 1, 2025
If you are a Nebraska resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request.
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Nebraska Privacy Request" in the subject line.
Applicable Law: New Hampshire Privacy Act (NHPA) - Effective January 1, 2025
If you are a New Hampshire resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by January 1, 2027).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "New Hampshire Privacy Request" in the subject line.
Applicable Law: New Jersey Data Privacy Act (NJDPA) - Effective January 15, 2025
If you are a New Jersey resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation). New Jersey has an expanded definition of sensitive data that includes financial information and certain demographic data - we do not collect these categories.
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by July 15, 2025).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 45 days.
To Submit a Request: Email info@getdriftline.com with "New Jersey Privacy Request" in the subject line.
Applicable Law: Tennessee Information Protection Act (TIPA) - Effective July 1, 2025
If you are a Tennessee resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Tennessee Privacy Request" in the subject line.
Applicable Law: Minnesota Consumer Data Privacy Act (MCDPA) - Effective July 31, 2025
If you are a Minnesota resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by July 31, 2026).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 45 days.
To Submit a Request: Email info@getdriftline.com with "Minnesota Privacy Request" in the subject line.
Applicable Law: Maryland Online Data Privacy Act (MODPA) - Effective October 1, 2025
If you are a Maryland resident, you have the following rights:
Important: Maryland prohibits the sale of sensitive data entirely (not just requiring consent). We do not sell any personal information, including sensitive data.
Data Minimization: Maryland requires data minimization - we only collect data reasonably necessary for the purpose disclosed.
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by October 1, 2027).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Maryland Privacy Request" in the subject line.
Applicable Law: Indiana Consumer Data Protection Act (ICDPA) - Effective January 1, 2026
If you are an Indiana resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Indiana Privacy Request" in the subject line.
Applicable Law: Kentucky Consumer Data Protection Act (KCDPA) - Effective January 1, 2026
If you are a Kentucky resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Kentucky Privacy Request" in the subject line.
Applicable Law: Rhode Island Data Privacy Act (RIDPA) - Effective January 1, 2026
If you are a Rhode Island resident, you have the following rights:
Sensitive Data: We obtain your opt-in consent before processing sensitive data (precise geolocation).
Universal Opt-Out: We honor Global Privacy Control (GPC) signals as a valid opt-out request (required by January 1, 2027).
Response Time: We will respond within 45 days, with one 45-day extension if reasonably necessary.
Right to Appeal: If we decline your request, you may appeal by contacting us. We will respond to appeals within 60 days.
To Submit a Request: Email info@getdriftline.com with "Rhode Island Privacy Request" in the subject line.
Privacy laws are rapidly evolving across the United States. If you are a resident of a state not listed above and your state has enacted a consumer data privacy law, we will honor the rights provided under that law. Please contact us at info@getdriftline.com with your state-specific request, and we will respond in accordance with applicable law.
We actively monitor privacy legislation and will update this Privacy Policy as new laws take effect.
| State | Law | Effective Date | Appeal Right | GPC Required |
|---|---|---|---|---|
| California | CCPA/CPRA | Jan 2020/2023 | No | Yes |
| Virginia | VCDPA | Jan 1, 2023 | Yes (60 days) | No |
| Colorado | CPA | Jul 1, 2023 | Yes (45 days) | Yes |
| Connecticut | CTDPA | Jul 1, 2023 | Yes (60 days) | Yes |
| Utah | UCPA | Dec 31, 2023 | No | No |
| Texas | TDPSA | Jul 1, 2024 | Yes (60 days) | Yes (2025) |
| Oregon | OCPA | Jul 1, 2024 | Yes (45 days) | Yes |
| Montana | MCDPA | Oct 1, 2024 | Yes (60 days) | Yes |
| Delaware | DPDPA | Jan 1, 2025 | Yes (60 days) | Yes (2026) |
| Iowa | ICDPA | Jan 1, 2025 | No | No |
| Nebraska | NDPA | Jan 1, 2025 | Yes (60 days) | Yes |
| New Hampshire | NHPA | Jan 1, 2025 | Yes (60 days) | Yes (2027) |
| New Jersey | NJDPA | Jan 15, 2025 | Yes (45 days) | Yes (Jul 2025) |
| Tennessee | TIPA | Jul 1, 2025 | Yes (60 days) | No |
| Minnesota | MCDPA | Jul 31, 2025 | Yes (45 days) | Yes (2026) |
| Maryland | MODPA | Oct 1, 2025 | Yes (60 days) | Yes (2027) |
| Indiana | ICDPA | Jan 1, 2026 | Yes (60 days) | No |
| Kentucky | KCDPA | Jan 1, 2026 | Yes (60 days) | No |
| Rhode Island | RIDPA | Jan 1, 2026 | Yes (60 days) | Yes (2027) |
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent laws:
Your personal data may be transferred to and processed in the United States, where our servers are located. The United States may not have the same level of data protection as your home country. We implement appropriate safeguards for international transfers, including:
For GDPR-related inquiries, you may contact us at info@getdriftline.com. We will respond to your request within 30 days as required by GDPR.
You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes applicable law.
If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA) at the federal level, and if you are a resident of British Columbia, additionally under the Personal Information Protection Act (PIPA).
Under PIPEDA, you have the following rights regarding your personal information:
We comply with the ten fair information principles under PIPEDA:
If you are a resident of British Columbia, your personal information is also protected under British Columbia's Personal Information Protection Act (PIPA). Under BC PIPA, you have the following additional rights:
We obtain your consent before collecting, using, or disclosing your personal information. Consent may be:
You may withdraw your consent at any time by contacting us. Withdrawal of consent may affect our ability to provide certain services.
Your personal information may be transferred to, stored, and processed in the United States, where our servers are located. By using the App, you consent to the transfer of your personal information outside of Canada. We ensure that any service providers who access your personal information outside of Canada provide a comparable level of protection.
Under BC PIPA, we notify you that your personal information may be stored or accessed outside of Canada and may be subject to the legal requirements of foreign jurisdictions, including lawful requirements to disclose personal information to government authorities in those jurisdictions.
In accordance with PIPEDA and BC PIPA breach notification requirements, if we experience a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will:
We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law. When personal information is no longer needed, we will securely destroy, erase, or anonymize it.
To exercise your privacy rights under PIPEDA or BC PIPA, please contact us at:
Email: info@getdriftline.com
Include "Canadian Privacy Request" in the subject line and specify your province of residence.
Response Time: We will respond to your request within 30 days. If we need additional time, we will notify you of the extension and the reasons.
If you are not satisfied with our response to your privacy concern, you may file a complaint with:
If you are a resident of Alberta or Quebec, additional provincial privacy legislation may apply:
For residents of other Canadian provinces and territories, PIPEDA applies as the governing federal privacy law.
The App is not intended for and is not directed at children. We do not knowingly collect personal information from:
If you are a parent or guardian and believe we have inadvertently collected personal information from your child, please contact us immediately at info@getdriftline.com. We will promptly:
DriftLine Co. is based in the United States, and your information is stored and processed on servers located in the United States (AWS us-west-2 region).
By using the App, you acknowledge and consent to the transfer, storage, and processing of your personal information in the United States and potentially other countries where our service providers operate. These countries may have data protection laws that are different from—and potentially less protective than—the laws of your country of residence.
We implement appropriate safeguards for international data transfers, including:
Some web browsers transmit "Do Not Track" (DNT) signals. There is currently no industry standard for interpreting DNT signals. The App does not currently respond to DNT signals. However, we do not engage in cross-site tracking or targeted advertising.
We honor Global Privacy Control (GPC) signals. If your browser or device sends a GPC signal, we will treat it as a valid request to opt out of the "sale" or "sharing" of personal information as defined by applicable state privacy laws (including California, Colorado, Connecticut, Montana, Oregon, and others).
Note: Since we do not sell or share personal information for targeted advertising, honoring GPC signals does not change how we process your data—but we respect and acknowledge these signals as required by law.
Learn more about GPC at globalprivacycontrol.org.
In the event of a data breach involving your personal information, we will:
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:
Your continued use of the App after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.
You can access previous versions of this Privacy Policy by contacting us at info@getdriftline.com.
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
DriftLine Co. LLC
Privacy Inquiries: info@getdriftline.com
Legal Inquiries: info@getdriftline.com
General Inquiries: info@getdriftline.com
When contacting us about a privacy request, please include:
We will respond to your inquiry within the timeframes required by applicable law: