NOAA predictions, feet above Mean Lower Low Water. A coastal reference station—not a takeoff sensor.
This edition merges the three prior atlases into 274 entries, 45 regions and 43 scout bands. Seven overlapping records were merged. The imported spot catalogue is not a newly verified survey; takeoffs, access details and exposure profiles still require local checking. Historical Killer Dana is retained as a landmark, without a forecast.
NOAA GFS-Wave, ECMWF WAM and Météo-France wave guidance are requested separately through Open-Meteo. They are distinct model origins, not guaranteed statistically independent forecasts. The API gateway is shared. The optional direct NOAA NOMADS fallback is a separate transport for GFS, never a fourth model.
There is one marine sampling node per named region. Spots share regional model input and use their own inherited exposure profiles. Nearby native model cells may also overlap. These are not 274 separate offshore sensors. The actual returned grid and retrieval age are visible under Sources.
Average face is an uncalibrated breaking-face proxy derived from offshore significant wave height, swell exposure and period. The set proxy is 1.5 × that estimate, not a forecast of the biggest possible wave. Daily cards average 06:00–19:00 Pacific values; the set number is the largest set proxy in those hours. Spread is the range among model estimates, not a confidence interval. Days 5–7 deserve more caution.
Tide, sandbar geometry, currents, wind effects on breaking quality, local bathymetry and island blocking are not dynamically solved. Coarse models and inherited pins can be wrong. Use this to choose what to check—not to decide that a hazardous entry is safe.
NDBC/CDIP buoy readings are shown separately, with their measurement time and distance. They never get copied into the next seven days. Missing heights remain missing, not zero. Old cached data keeps its original retrieval timestamp.
Water cards show current modeled sea-surface temperature from Open-Meteo / Météo-France, not a beach sensor. A nearby NOAA NDBC temperature, when available, is a separate station reference with its observation time and distance. Air, sky, rain, humidity and UV come from weather-model guidance. These panels stay on current/latest time independently of the surf date bar. Missing readings remain missing; stale data is identified.
The planner finds consecutive future hours where every enabled model’s face estimate is inside your chosen range, model count and regional wind meet your limits, and feeds are fresh. Daylight matching uses provider sunrise/sunset times. It does not certify safe access, waves or water. Local pin corrections are separate from the imported catalogue and do not move regional model nodes.
For Bluehost/PHP hosting, upload the included relay beside this HTML. It only allows this atlas’s NOAA stations and bulletin paths. Standalone HTML still attempts NOAA directly; browser cross-origin restrictions can block it. Open-Meteo forecasts do not require this relay.
Open-Meteo’s free hosted API is for non-commercial use and has rate limits. A paid product needs an appropriate commercial plan or another authorized data arrangement, server-side keys, shared caching and map-tile licensing review. No API secrets belong in this HTML.
In-app watches remain local. Closed-app Web Push is optional and requires the included hosted watch service, HTTPS and permission. Connecting sends only favorites, selected region names, watch rules, quiet hours and the device push subscription to that service. Personal journal text, sessions and local pin corrections are not sent. Pause/disconnect controls and server-sync status are in Watch → Delivery. This is not a safety-alert service.
Signed-in users can save their own Surf’s up and incoming-swell rules. Supabase stores those rules, delivery consent, device subscriptions and the inbox. A separately deployed worker checks forecasts on your host or, optionally, in Supabase. Email recipients come only from the confirmed account address. Product-news consent is separate. No journal text or GPS history is sent. Settings are not proof a worker is running; check My alerts → Delivery. Browser sign-out unlinks this browser, but deliberately enabled account email rules continue until paused or unsubscribed.
Journal text, visited flags and theme stay in this browser. Signing in syncs account favorite IDs and a verified email with Supabase; product-email consent is optional and separate. Device watch settings go to the watch service only after push opt-in. Notes and session records are not account-synced. Export your records before changing devices or clearing browser data. Providers receive the map’s coastal request coordinates; only the Locate button asks for your device location, and the atlas does not send that location to its data feeds.