Privacy notice
Your data in the Port Digital Twin.
This notice explains what personal data the AImovation Port Digital Twin uses, why, how long we keep it and what your rights are under UK data protection law.
Who we are
AImovation Ltd is the controller for the personal data in the Port Digital Twin at port-twin.pages.dev. We are registered with the Information Commissioner's Office, reference ZC276382.
Contact us about privacy at: to confirm.
What we collect
- Your sign in email. The twin is by invitation only. Cloudflare Access checks your email with a one time code each time you sign in.
- A sign in log. The email and the time of each sign in, so we can see who used the twin and spot misuse.
- Ship data from AIS. Ships broadcast their identity, position, speed and course by public radio. We receive these broadcasts for UK waters. An identity number with a track can identify a vessel. For a small private boat, that can identify its owner.
- One cookie. Cloudflare Access sets a session cookie when you sign in, so you stay signed in. We set no other cookies and use no analytics or advertising cookies.
The public landing page asks you for nothing.
Why we use it and our lawful basis
Our lawful basis is legitimate interests:
- For sign in data, our interest is to run a secure service that only invited people can open.
- For AIS data, our interest is to model how ships use UK ports, so ports can plan shore power and cut emissions.
We have weighed these against your interests. The sign in data is the least we need. AIS messages are broadcast openly for safety at sea. We store only ships that are slow or moored near ports in our database. We show ships, not people.
How long we keep it
- AIS positions: 7 days in the database.
- Raw AIS messages: 60 days on our server, then archived in Cloudflare R2. The archive retention period is to confirm.
- Measured stays of ships at ports: kept, as they form the history the model learns from.
- Sign in records: 24 months.
Who processes it for us
- Cloudflare: hosting, the sign in (Access) and file storage (R2).
- Supabase: the database. Region to confirm.
- Hetzner: the server that receives AIS messages. Location to confirm.
- GitHub: our code and the automated jobs that process the data.
- Google and Cesium: the photographic 3D views. Your browser loads 3D tiles from them after you sign in.
- Ordnance Survey: the base maps. Your browser loads map tiles from them after you sign in.
Some of these providers may handle data outside the UK. The safeguards in place are to confirm.
Your rights
You have the right to:
- ask for a copy of your personal data
- ask us to correct it
- ask us to delete it
- ask us to restrict how we use it
- object to our use of it, because we rely on legitimate interests
To use any of these rights, contact us at the address above. We will reply within one month.
How to complain
Please tell us first, so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Last updated 29 October 2026.