Contents
- The principle: nothing is public
- Adding a friend: by link, never by directory
- Sharing a route
- Sharing a place — and why it is the most sensitive
- Clubs: approved by hand
- A club's places go through a moderation queue
- Sharing a passage: the consent screen
- Withdrawing a share — and what a withdrawal cannot do
- Deleting your account, handing over your boat
1. The principle: nothing is public
Solano publishes nothing. There is no public profile, no feed, no open link to a route or a passage. Everything that leaves your account goes to people you added yourself, or to a club you belong to.
Three objects can be shared, and they are nothing alike in terms of what they reveal:
2. Adding a friend: by link, never by directory
From the 👥 My friends menu, you create an invitation link and send it to whoever you want. It works for one person only and expires after 7 days.
There is no directory: nobody can find you from your email address or your display name. That is not an omission, it is the choice: a searchable directory is an account-enumeration feature, exactly what we do not want to offer.
3. Sharing a route
In 🗺️ My routes, the 👤 button on a route sends it to a friend — or to a club. Your friend then sees your live route, not a copy: if you edit it, they see the edit.
This is deliberate. A copy would survive revocation, and “withdraw the share” would stop meaning anything.
4. Sharing a place — and why it is the most sensitive
In ⭐ My places, the same 👤 button. The person sees the place's name and its exact coordinates.
That is why a place is only shared with named friends, never directly with a club. Towards a club it goes through a moderation queue — see below.
5. Clubs: approved by hand
A club (an association, a circle of crew mates, a sailing school) is requested from 🏛 My clubs. It is born pending: until it is approved, nobody can join it and nothing can be shared in it.
Why this friction? Because a club becomes responsible for the data its members put there. We do not let anyone open one on a whim.
Once active, its members share routes with each other. Anyone can belong to several clubs, with a different role in each: manager here, plain member there.
Three roles. The owner is the account that requested the club — ideally an account in the club's name rather than one person's, so it outlives committee changes; it alone appoints or demotes managers, and hands over or deletes the club. Managers run day-to-day matters: they invite and remove members and approve proposed places. Members share and propose.
The club details — description, e-mail, phone, website, home port, logo — are kept by the owner and managers, and readable by every member. The contact e-mail is displayed information only: no message is ever sent to it.
6. A club's places go through a moderation queue
A place is not “shared” with a club, it is proposed. A manager approves or declines it, with a reason. Three states are visible: pending, approved, declined.
7. Sharing a passage: the consent screen
This is the most committing share, and the only one that goes through a dedicated screen. It is reserved to the boat's owner: a logbook holds the entries, photos and names of the whole crew — the person accountable for it is the owner.
What leaves
Every timestamped position (including departure and arrival, often your home port or mooring), the conditions you logged (wind, sea, pressure), points of sail, propulsion, the logbook photos, and the boat — its name and identity (registration, MMSI, home port). Your friend knows your boat: hiding it would protect nothing.
What never leaves
There is nothing to tick, and this is not display filtering: these fields are not even read by your friend's app.
8. Withdrawing a share — and what a withdrawal cannot do
The 👥 My friends panel lists everything you are sharing. One click on “Withdraw” cuts access immediately. Removing someone from your friends also cuts every share, in both directions.
9. Deleting your account, handing over your boat
Deleting your account erases everything you shared. But a boat is not only yours: its passages and its logbook also belong to the crew who kept them.
So the deletion screen offers to hand the boat over to a crew member (and a club to one of its managers) rather than erase it with its whole log. Without an accepted handover, everything goes — that is the erasure promise, kept to the end.
Going further
The detail of what is stored, why, and for how long is in the privacy policy. How the logbook itself works is described in Logbook: keeping your navigation journal.