Privacy Policy

Last updated: January 7, 2026

This Privacy Policy describes how Rouge Industries LLC ("we", "us") handles information in connection with the Universal Surf Control™ web application and companion bridge hardware (collectively, the "Service"). We built the Service to keep as much data as possible on your device. We do not sell your data.

1. Information we process

Stored locally on your device (never sent to us)

  • Surfer presets, safety thresholds, plate sync setting, center-ballast toggle, and ballast timers (browser localStorage).
  • OAuth tokens for connected music providers (Spotify, Apple Music). Stored in localStorage / sessionStorage only.

Sent over your local network

  • Ballast and plate commands sent to your bridge controller at the IP/URL you configure.
  • The Service does not relay these commands through our servers.

We do not collect

  • Accounts, names, email addresses, or payment information.
  • GPS or vessel location.
  • Analytics, advertising identifiers, or third-party tracking cookies.

2. Third-party music services

When you tap Connect on a music provider, you authenticate directly with that provider. Your credentials are never seen by us or by the Service.

  • Spotify — OAuth (PKCE). An access token and refresh token are stored on your device to control playback via the Spotify Web Playback SDK. Governed by the Spotify Privacy Policy.
  • Apple Music — MusicKit JS. Authentication and playback occur inside Apple's SDK. Governed by the Apple Privacy Policy.
  • Amazon Music — the Service opens the Amazon Music app via a link. No credentials are exchanged. Governed by the Amazon Privacy Notice.

You can disconnect any provider at any time from the Cockpit Audio panel; this clears the stored tokens from your device.

3. Hosting and logs

The Service is delivered as static assets and edge-hosted server functions. Hosting providers may record standard request metadata (IP address, user agent, timestamp) for security and abuse prevention. We do not associate this metadata with individual users and do not use it for advertising.

4. Cookies and similar technologies

The Service does not set advertising or analytics cookies. It uses localStorage and sessionStorage to remember your preferences and music-service sessions on the current device.

5. Children

The Service is intended for adult operators of powered watercraft and is not directed to children under 13. We do not knowingly collect information from children.

6. Your choices

  • Clear stored settings and tokens by clearing site data in your browser.
  • Disconnect any music provider from the Cockpit Audio panel.
  • Revoke OAuth authorization in your Spotify or Apple ID account settings.

7. Safety notice

The Service controls physical ballast pumps, valves, and actuators. Use it only in safe operating conditions with the swim area clear. See the License for warranty and liability terms.

8. Changes

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page.

9. Contact

Questions or requests: privacy@rougeindustries.example
Rouge Industries LLC