Skip to main content
TopCrewPost role

Privacy policy

Last updated 26 May 2026.

TopCrew (operated as part of OnlyHulls) is an aggregated yacht crew job board. This policy explains what we collect when you use crew.onlyhulls.com, why we collect it, how long we keep it, and the choices you have. We try to keep it short and concrete rather than boilerplate.

If you have questions or want to exercise any of the rights described here, email hello@onlyhulls.com.

1. Who runs TopCrew

TopCrew is built and operated by the same team behind OnlyHulls, a source-checked boat marketplace. The operator is the data controller for the personal data described below. Contact: hello@onlyhulls.com.

2. What we collect

We try to collect as little as possible to run the service.

Account data (required)

  • Email address (used to sign in and contact you).
  • Display name.
  • Password — stored only as a bcrypt hash. We never see or store your plain-text password. If you sign in with Google, we receive your email, name, and Google account ID; we do not see your Google password.

Crew profile (optional)

  • WhatsApp number, primary department, preferred working regions, certification level. You can skip these and add them later, or never.

Job-hunt activity

  • Roles you save, apply to, draft replies for, or mark as a lead.
  • Notes and follow-up reminders you write inside TopCrew.
  • Role alerts and saved searches you set up.

Technical data

  • IP address, browser/user-agent, and approximate location (city/country) from your IP.
  • Pages visited, roles viewed, and basic event counts (used for product analytics and fraud detection).
  • Session cookie that keeps you signed in.

We do notcollect or store: passport scans, visa documents, certification PDFs, banking details, or payment cards. If a job source asks for any of these, they’re asking you, not us. See spot a scam before you send.

3. How we use it

  • Run your account and keep you signed in.
  • Show you roles, save your drafts and follow-ups, and sync across your devices.
  • Send role alerts you opt into.
  • Send transactional email (sign-in confirmations, password resets, alerts you requested).
  • Detect abuse, scams, and brute-force sign-in attempts.
  • Improve the product (aggregate, non-identifying analytics).

We do not sell your data. We do not run ad networks or share data with third-party advertisers.

4. Legal bases (UK/EU GDPR)

  • Contract: to provide the account features you signed up for.
  • Legitimate interest: fraud prevention, security, basic product analytics, transactional email.
  • Consent: optional role alerts and any marketing email (you can opt out at any time).
  • Legal obligation: where we have to retain or disclose information to comply with the law.

5. Aggregated job listings

Job postings on TopCrew are aggregated from public yacht crew agency boards and community channels. Each listing links back to its original source. We don’t republish private contact details that weren’t public on the source, and we don’t pass your profile to any agency. If you click “Apply at source”, you leave TopCrew and interact with that source under its own terms and privacy policy.

6. Who we share data with

We use a small number of processors to run the service:

  • Hosting & database: Hetzner Online GmbH (Germany).
  • Transactional email: Resend (United States, with EU data residency available).
  • Product analytics: PostHog (EU region).
  • Google Sign-In: Google LLC, only if you choose to sign in with Google.

We disclose data to law enforcement only when legally required, and only the minimum needed to comply.

7. How long we keep it

  • Account, profile, drafts and saved roles: kept while your account is open.
  • Sign-in/security logs: up to 90 days, longer if needed to investigate abuse.
  • Aggregated, non-identifying analytics: kept indefinitely.
  • Account deletion: when you delete your account (from your account settings or by emailing us) we remove your profile, drafts, saved roles and notes. Some data may remain in encrypted backups for up to 35 days before rotation.

8. Your rights

Under UK and EU data protection law (and similar laws elsewhere) you can:

  • Access a copy of the personal data we hold about you.
  • Correct anything that’s wrong.
  • Delete your account and the data tied to it.
  • Object to processing based on legitimate interest.
  • Withdraw consent for optional features at any time.
  • Export your drafts, notes and saved roles.
  • Lodge a complaint with a supervisory authority — in the UK that’s the ICO (ico.org.uk).

Email hello@onlyhulls.com and we’ll respond within 30 days.

9. Cookies

We use a small number of first-party cookies and similar local storage strictly for: keeping you signed in, remembering your theme/language, and basic product analytics. We don’t set advertising cookies and we don’t share cookie data with ad networks.

10. International transfers

The primary application and database are hosted in the EU (Germany). Some processors (notably Google Sign-In and Resend) may process data in the United States under Standard Contractual Clauses or equivalent safeguards.

11. Children

TopCrew is for working-age adults. You must be 18 or over to use the service.

12. Changes to this policy

If we change anything material, we’ll update the “Last updated” date above and, for changes that affect what we collect or how we use it, notify signed-in users by email.

Questions about this policy?Email hello@onlyhulls.comRead terms