Privacy notice
What this app stores about you, who else sees it, and how to get rid of it. Written to match what the code actually does.
Who runs this service
Meteo Watchdog is operated by the owner of uzfuka.sk, a private individual, as a free service for wind-sport users. For anything in this notice, including requests about your data, write to [email protected].
What we store about you
An account holds your email address, a hashed password (bcrypt - the password itself is never stored or recoverable), the time you registered, your interface language, map-filter preferences, and your watchdogs: which station you follow, the wind and gust thresholds, the direction range, and which channels you chose. If you link Telegram, we also store your Telegram chat ID and username so alerts can be delivered. If you turn on push notifications, we store the subscription your browser issues for each device you enable (its push-service address and the keys needed to encrypt a message to it) so alerts can reach that device; you can turn it off per device, and a subscription the push service reports as gone is deleted automatically. If you write a public community note, we store its text, date and link to your account. If you create a public wind-sport spot or access point, we store its submitted name, type, coordinates, description, spot suitability, creation date and a private internal link to your account. If you rate how a spot was blowing (1-5), we store the rating, which sport you were riding if you say so, the time range of the session if you pick one, how strong the wind felt (light, moderate, strong or very strong) if you answer that optional question, the wind speed/gusts/direction our servers recorded from nearby stations for that time, what each weather station within 30 km read at that time (weather readings only, no personal data), and a private internal link to your account; this teaches the spot its own typical good-conditions window and how well each station matches what riders felt, without any AI service seeing or processing it. The public map does not show your email or account identity for any of these contributions - a rating is never shown linked to who gave it, only combined into a count and an average.
Signing in with Google (optional)
You can create an account or sign in with your Google account instead of a password; it is entirely optional and email-and-password sign-in works as before. If you do, Google tells us two things: the email address of your Google account (which Google has verified) and a stable account identifier that Google assigns to you. We store both - the email as your account email and the identifier only so we can recognise the same Google account next time and link it to your account. The reply from Google may also carry your name and profile photo; we do not keep them, and we receive nothing else from your Google account (no contacts, no other data) and get no access to your Google services. An account created this way has no password until you choose to set one through the password-reset link. Deleting your account deletes the stored identifier with it. Google processes the sign-in itself under its own privacy policy.
Cookies and local storage
One cookie, meteo_session, keeps you signed in. It is httpOnly, holds a signed token, and lasts 180 days or until you sign out. It is strictly necessary for the service to work and is not used for advertising or tracking. If you choose to sign in with Google, a second cookie, meteo_google_oauth, exists for at most ten minutes while you are at Google and is deleted as soon as you return. Your language choice and map filters are also kept in your browser's local storage. When signed in, map filters are saved to your account so they follow you across devices.
Location
If you allow it, the browser gives the map your position so it can centre there. Nearby-station discovery is off by default. Only if you turn it on, the coordinates at the centre of the map are sent to our server, which passes them to The Weather Company to ask which weather stations are close by. We do not automatically store these location or discovery coordinates in our database or link them to your account. Coordinates you deliberately submit while creating a public spot or access point are stored as that map content. Declining location simply means the map does not centre on you.
Who else receives data
Map tiles are loaded directly from Esri, so their servers see your IP address and which area you are viewing. Nearby-station lookups go to The Weather Company. Verification and alert emails are sent through our email provider, which processes your address and the message. Telegram alerts are delivered by Telegram. Weather readings are fetched by our server from The Weather Company, Open-Meteo, MET Norway and the NOAA Aviation Weather Center - those requests contain no information about you.
How long we keep things
Account data and community notes are kept until you delete them or delete your account. Weather observations are kept for seven days and are not personal data. Deleting your account removes it, all its watchdogs, all notes written by it, all ratings you gave and all push subscriptions, immediately and permanently. It also removes the private creator-account link from spots and access points you contributed; the public map content itself remains unless a moderator removes it.
Your rights
You can see and change your account data in the app, delete your own community notes or ratings, and delete your account yourself from Settings. Editing and removal of shared spot or access-point content is moderator-controlled; request a correction or removal at [email protected]. Under the GDPR you may also request access, correction, erasure, restriction, portability, or object to processing. You may complain to the Slovak Data Protection Authority (dataprotection.gov.sk).
Security
Traffic is encrypted over HTTPS. Passwords are stored only as bcrypt hashes. Changing your password signs out every other session. Nobody can guarantee perfect security, and this is a free service run by one person - please do not reuse an important password here.
What we do not do
There is no advertising, no analytics, no tracking scripts, and no profiling. Your data is not sold, rented, or shared with anyone beyond the providers listed above, which are needed to make the service work.
Changes
If this notice changes materially, the date below changes with it. The current version always applies.