Privacy Policy

Last updated: July 2026

This policy explains what data Weatherflip collects, why, and what your rights are. The short version: we store what's needed to run your account and weather alerts, we don't sell data, and you can delete everything yourself at any time.

Account data

When you create an account we store your email address, a salted hash of your password (never the password itself), and the date you signed up. If you set a home city, we store which of our listed cities you chose — used to measure distances and suggest travel connections.

Weather preferences & alerts

Your saved weather preferences (temperature ranges, dates, condition filters, geographic scope) are stored so our nightly job can match them against new forecasts. We also keep a log of which destinations we've alerted you about, so we don't email you the same place twice in a week. Alert emails are sent only to verified addresses, and every email contains a one-click unsubscribe link.

Cookies & local storage

We use a single session cookie to keep you signed in — it identifies your account and nothing else, and we set no third-party or advertising cookies. Your browser's local storage holds small conveniences on your own device (your recent searches, and whether you've seen one-time UI hints); this data never leaves your browser.

Payments

Subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers; we store only a Stripe customer reference and your subscription status. Stripe's own privacy policy applies to the payment itself.

Email delivery

Verification and alert emails are delivered via Resend, our email service provider, which processes your email address for that purpose on our behalf.

Analytics

We use GoatCounter for privacy-friendly page statistics. It does not use cookies and does not collect personal data.

Newsletter (legacy)

If you previously joined our mailing list, we hold that email address on the basis of your consent and you may ask us to remove it at any time.

Retention & deletion

We keep your data for as long as your account exists. Deleting your account (Account → Delete account) immediately removes your email, preferences, home city, and alert history from our database; routine backups age out within 14 days.

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (self-service via your account page)
  • Restrict or object to processing
  • Data portability

To exercise any of these rights, or for anything not covered by the self-service options, contact us at [email protected].

Changes to this policy

We may update this policy as the product evolves and will note the date of the latest change at the top of this page.

Contact

Questions or concerns? Contact us at [email protected].