Your data, and what we do with it

This Privacy Policy explains how Weathard (“Weathard”, “we”, “us”) collects, uses, shares and protects personal data when you use our website and app (the “Service”). It applies to everyone who visits or creates an account. It should be read together with our Terms of Use.

For the purposes of the EU/UK GDPR, Weathard is the data controllerof the personal data described here. Weathard is a free beta — please don't store anything sensitive you can't afford to lose.

We collect the following, all of it in order to provide the Service:

a) Information you give us

• Account data — your email address, and a password (if you sign up with email) which is stored only as a secure hash by our authentication provider.
• Profile data — a display name and avatar you provide, or that your sign-in provider (e.g. Google) shares with us when you choose social sign-in.
• Your content & settings — the spots you save (including their coordinates, name, country and any description or tags), the alerts and condition thresholds you create, your home location, unit preferences, favourites, packages, and any community-feed posts or comments.
• Communications — messages you send us (e.g. support requests) and invite codes you enter.

b) Information we collect automatically

• Technical & log data — IP address, browser/device type, and timestamps, generated when you use the Service and needed to operate and secure it.
• Session & local storage — cookies and browser local storage used to keep you signed in and to remember your preferences (see Cookies & local storage).
• Usage analytics — aggregated, privacy-friendly usage metrics (e.g. page views) via Vercel Analytics, which does not use tracking cookies or build cross-site profiles of you.

We do not intentionally collect special categories of data (such as health, race or precise device geolocation). Spot coordinates are locations you choose to save, not your live position.

We use personal data to:

• create and manage your account and authenticate you;
• provide the core features — saving spots, computing forecasts for them, and evaluating your alerts;
• send you the condition notifications you set up, and essential service messages (e.g. email confirmation, password resets);
• enable community and sharing features you choose to use (public spots, the feed, and packages);
• keep the Service secure, prevent abuse, and debug problems; and
• understand usage in aggregate so we can improve Weathard.

Legal bases (GDPR). We rely on: performance of a contract (to provide the Service you asked for), our legitimate interests (to secure and improve the Service, kept in balance with your rights), your consent where required (e.g. optional communications), andcompliance with legal obligations where they apply.

We use only what the app needs to function — we do not use advertising or cross-site tracking cookies. Specifically:

• Authentication cookies set by our auth provider to keep you signed in securely.
• Local storage for small preferences, such as your dashboard filters and a draft you started before signing up.

You can clear these at any time via your browser settings; doing so will sign you out and reset saved preferences.

We do not sell your personal data and we do not share it for third-party advertising. We share data only with the service providers (processors) that make Weathard work, and only as needed:

• Supabase — authentication, database and backend hosting (stores your account and content).
• Vercel — application hosting and privacy-friendly analytics.
• Google — sign-in (Google OAuth) when you choose it, and Maps/Places for the spot picker and location search; when you search for a place, your query and approximate map view are sent to Google to return results.
• Open-Meteo — weather and marine forecasts; we send a spot's coordinates to retrieve its forecast.
• Travelpayouts — indicative travel-price estimates, where that feature is shown.
• OpenStreetMap / CARTO — map tiles used to render maps in the app.

Each provider processes data under its own privacy terms. We may also disclose data if required by law, to protect the rights, safety or property of Weathard or others, or as part of a business transfer (e.g. a merger or acquisition), in which case we'll aim to notify you.

Your spots and alerts are private to you by default. When you choose to make a spot public, post to the community feed, or include content in a package others can download, that content becomes visible to and copyable by other users. Copies others have already downloaded are outside our and your control and may remain even if you later edit, unpublish or delete your original — see the Content you create section of the Terms. Don't publish anything you're not willing to share this way.

We keep your personal data for as long as your account is active, and then only as long as needed for the purposes above or to meet legal requirements. You can delete your account at any time from your profile settings or by contacting us; this removes your account and the private content associated with it. As noted above, public content and copies others have downloaded may persistafter deletion. Backup copies may take a short time to be fully purged from our providers' systems.

We use reputable providers and reasonable technical and organisational measures — including encryption in transit (HTTPS), hashed passwords, and database access controls — to protect your data. No online service can be perfectly secure, so we can't guarantee absolute security; please use a strong, unique password and keep your login credentials safe.

Our providers may process and store data in countries outside your own, including the United States. Where data is transferred out of the EEA/UK, we rely on appropriate safeguards (such as the providers' Standard Contractual Clauses) to protect it in line with applicable law.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate or incomplete data;
• delete your data (“right to be forgotten”);
• port your data to another service;
• object to or restrict certain processing, and withdraw consent where we rely on it; and
• not be discriminated against for exercising these rights.

California residents have equivalent rights under the CCPA/CPRA, including that we do not sell or share personal information as those terms are defined. To exercise any right, email us at legal@weathard.app — we may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority.

Weathard is not intended for children. You must be at least 16 years old, or the age of digital consent where you live, to use the Service. We do not knowingly collect data from children under that age; if you believe a child has given us personal data, contact us and we will delete it.

The Service may link to third-party sites or services (for example, a spot's location on an external map). We are not responsible for their content or privacy practices; please review their policies before providing them any data.

We may update this Privacy Policy as the Service evolves. When we do, we'll change the “last updated” date above and, for material changes, make reasonable efforts to notify you. Continuing to use Weathard after changes take effect means you accept the updated policy.

Questions or requests about your privacy? Contact us at legal@weathard.app. The data controller is Weathard.app.