1. Who is responsible
WeatherTick is operated by WeatherTick Ltd, which is responsible for the personal information described here. Contact support@weathertick.com for privacy questions and requests.
2. Information we process
Google sign-in provides your Google account identifier, name and email address. We use these to identify your account; we do not receive your Google password or access your exchange accounts. GitHub sign-in provides your GitHub account identifier, username, name and verified email address; we use them only to identify your account and do not keep the GitHub access token. Email sign-in uses only the address you enter; the one-time code is stored as a hash and expires after 10 minutes.
We store your plan and access period; API key names, prefixes and cryptographic hashes; key creation, revocation and last-use times; and API request routes, times, response status and credit usage. Cloudflare may also process IP addresses, browser information and request or security logs to deliver and protect the site.
For subscriptions, we store Waffo customer, checkout, subscription and payment-event identifiers, product, status and billing-period information. Waffo handles payment details on its checkout; WeatherTick does not store full card numbers or security codes. If you contact us, we receive the message, reply address and information you include.
3. Purposes and legal bases
We use account, usage and billing information to provide the service, enforce your plan limits, confirm purchases, manage subscriptions and answer support requests. Where a legal basis is required, these activities rely on performance of our agreement with you. Security and abuse prevention rely on legitimate interests, balanced against your rights; legally required records rely on our legal obligations. Advertising measurement (section 5) relies on your consent in the European Economic Area, the United Kingdom and Switzerland; elsewhere it runs unless you opt out. We do not sell personal information for money, although under some US state laws that measurement can count as “selling” or “sharing”; section 5 explains how to opt out.
4. Cookies and local storage
Essential cookies support sign-in: isobar_oauth holds temporary authorization state for up to 10 minutes; isobar_session holds a signed login session for up to 30 days, renewed while you keep using the site. They are HttpOnly and use secure transmission on the public HTTPS site. Blocking them prevents sign-in.
Two more first-party cookies remember your choices: wt_lang holds the language you pick with the language switch, for up to one year, so pages arrive in that language; wt_consent holds your advertising choice (section 5) for up to 180 days.
Your browser also stores the selected language (weathertick-language), your advertising choice (weathertick-consent), a note that a sign-up or purchase has already been reported to the ad platforms so it is not reported twice (weathertick-signup-reported, weathertick-purchases-reported), and your board of stations (isobar-preferences). You can remove these through your browser’s site-data settings, which resets those preferences and may sign you out.
A first-party cookie, wt_src, notes for up to 90 days the campaign link or referring site you first arrived from and the most recent campaign link you used. It is copied to your account when you sign up and to a checkout when you open one, so we can tell which of our own campaigns bring customers. The cookie itself is never sent to an advertising platform; the platforms’ own tags are described in section 5.
Cloudflare Web Analytics counts page views on this site: a small script from static.cloudflareinsights.com reports to /cdn-cgi/rum on this domain. It sets no cookies and does not fingerprint visitors or follow them across sites; we see only aggregate figures such as page views, referring sites, countries, browsers and page-load times.
5. Advertising measurement
When we advertise, we may use the measurement tags of Meta (Facebook and Instagram), Google (Google Ads and Google Analytics), X, Reddit and TikTok to learn which ads bring visitors and customers. Only the tags we have set up are loaded. A tag runs its platform’s code in your browser, sets or reads cookies and similar identifiers (for example Meta’s _fbp, Google’s _gcl_au and _ga, Reddit’s _rdt_uuid and TikTok’s _ttp), and sends the platform the pages you view here, your IP address and browser details, the ad click identifier in the link you arrived on, and two events: that a new account signed up, and that a subscription was bought, with the plan, its price in USD and an order reference. We do not set these tags up to collect your name, email address or payment details. Each platform uses this information under its own privacy policy, which may include linking it to an account you hold with that platform and using it for its own advertising services.
In the European Economic Area, the United Kingdom and Switzerland these tags load only after you choose Accept in the cookie banner, and the legal basis is your consent. Elsewhere they load unless you opt out, and a Global Privacy Control signal from your browser counts as an opt-out. We tell the regions apart by the country Cloudflare reports for your connection. Sign-in, language and consent cookies and Cloudflare Web Analytics do not depend on this choice.
To change your choice, use Cookie settings in the footer of our pages - outside those regions the link reads Do not sell or share my personal information. The choice is kept in the wt_consent cookie and your browser storage for up to 180 days, after which we ask again. Declining or withdrawing consent stops the tags from loading from the next page on, and the current page reloads so no tag is left running; it does not affect what was sent before. You can also opt out by email.
California and other US states: sending these page views and events to ad platforms for cross-context behavioral advertising may be a “sale” or “sharing” of personal information under the California Consumer Privacy Act as amended by the CPRA, and under similar state laws. The categories involved are identifiers (cookie and device identifiers, IP address, ad click identifiers), internet activity on this site, and commercial information (a sign-up or a purchase and its value); the recipients are the ad platforms named above. We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. You can opt out as described above, and we will not treat you differently for exercising any of these rights.
6. Providers and international processing
Cloudflare provides hosting, delivery, security, database, sign-in email and aggregate web analytics services. Google provides sign-in and Gmail support correspondence; GitHub provides sign-in. Waffo Pancake handles checkout and subscription billing as merchant of record. We share information needed for those services; each provider also processes information under its own applicable privacy terms. The advertising platforms in section 5 receive the information described there when their tags are allowed to load. We may disclose information where legally required or necessary to address fraud or security incidents.
The service is operated from China, and our providers, including the advertising platforms, use international infrastructure. Your information may therefore be processed outside your country, including in countries with different privacy protections. Where applicable law requires safeguards for a transfer, we are responsible for arranging the required safeguards. Contact us for information about a particular transfer.
7. Retention and security
We retain information while needed to operate your account and subscriptions, resolve support or payment disputes, prevent abuse, and meet applicable record-keeping obligations. Retention depends on the data and purpose; we do not currently apply a single automatic deletion period to all records. On an account-deletion request, we assess and delete or anonymize information no longer needed, and explain any records that must be retained.
Controls include encrypted HTTPS connections, protected session cookies, hashed API keys and server-side payment secrets. No system can promise absolute security. Please avoid sending passwords, full API keys or card details in support messages.
8. Your choices and rights
You can revoke API keys in your account, cancel subscription renewal through the billing portal, change your advertising choice with the footer link (section 5), and clear browser storage. To request access, correction, a copy of your data or account deletion, email support from the account address. We may request proportionate verification before disclosing or changing account information.
Depending on applicable law, you may also have rights to restrict or object to processing, portability, withdrawal of consent where processing relies on consent, and a complaint to your local data protection authority. Contact us to exercise those rights. WeatherTick is intended for adults aged 18 or older; contact us if you believe a child has provided information.
9. Policy updates
We publish changes here with an updated effective date and give additional notice for material changes where required. The contact page always lists our current support address.