Privacy Policy

This Privacy Policy explains how Pro Weather handles personal data when you use our website, our mobile app and our hosted weather-site service (the “Service”). We are committed to processing personal data in line with the EU General Data Protection Regulation (GDPR).

1. What data we collect

• Account data: your email address and authentication details when you sign up and sign in.
• Billing data: when you subscribe, our payment processor (Stripe) handles your card details directly; we receive and store limited information such as your customer ID, subscription status and billing country. We do not store full card numbers.
• Station & site data: the API credentials you provide for a station vendor service such as WeatherLink, Ecowitt or Tempest (stored encrypted), the secret upload address your hardware or software sends readings to, your weather observations, and the configuration of your published site.
• Technical & usage data: IP address, device and browser information, and logs we use to operate, secure and improve the Service, plus analytics data described in section 4.
• Communications: messages you send us (for example support emails, or the feedback form on our own pages).

2. How and why we use your data

We process personal data on these legal bases:

• To provide the Service (contract): creating your account, ingesting and displaying your station data, and managing your subscription.
• Legitimate interests: securing the Service, preventing abuse and fraud, rate-limiting, and improving our product, including analytics that store nothing on your device (section 4).
• Consent: optional analytics cookies and similar storage on your device (section 4), and any marketing emails. You can withdraw consent at any time.
• Legal obligations: for example keeping invoicing and tax records.

3. Service emails

We send transactional and lifecycle emails needed to run the Service (for example a welcome message, trial reminders, and payment notices). These are part of providing the Service rather than marketing. If we ever send genuine marketing emails, they will be based on consent and you can unsubscribe at any time.

4. Cookies and analytics

We use a small number of strictly necessary cookies and similar technologies that are required to sign you in and keep the Service secure; these do not require consent.

Optional cookies are used only if you accept them in the cookie banner. You can change or withdraw that choice at any time with the Cookie settings link at the bottom of our pages and of every published weather site.

Product analytics and error monitoring

We use PostHog to see how the Service is used, on our own pages and on published weather sites, and to capture errors so we can fix them. It is hosted in the EU, and events reach it through our own domain rather than a third-party script host. Until you accept optional cookies in the cookie banner, PostHog keeps its identifier only in the memory of the open page: nothing is stored on your device, and each page view is counted separately. If you accept, PostHog stores an identifier in your browser (local storage and a first-party cookie) so that repeat visits can be recognised as the same session. If you withdraw that choice, it stops storing the identifier and removes what it stored.

Advertising measurement

On pro-weather.com we load the OpenAI Ads Measurement Pixel only after you accept the cookie banner. It uses first-party cookies to support advertising attribution. We do not pass your email address or account identifiers to this pixel. It does not run on hosted weather sites. Declining prevents the SDK from loading; withdrawing consent disables measurement and asks the SDK to remove its attribution cookies. On the same pages and under the same consent we load the Google Ads tag, to count completed signups that came from our ads.

Session replay

On our own pages (the marketing site, sign-in and the dashboard) we can record a replay of your visit using Sentry, so that when something breaks we can see what actually happened instead of guessing from an error message. This is loaded only after you accept via the cookie banner, and it stops immediately if you withdraw that choice.

A replay is a reconstruction of the page, not a video and not a recording of your screen or microphone. All text and every value you type is masked before it leaves your browser, so passwords, API credentials and billing details are never transmitted; images and other media are blocked, and we do not capture the contents of network requests. What remains is layout, clicks and navigation. Replays are stored in the EU and retained by Sentry for up to 90 days.

Session replay runs on Pro Weather’s own pages only. It is never active on a published weather site, so visitors to a site hosted with us are not recorded.

Feedback form

Our own pages carry a Feedback button. If you open it and send the form, the message you write, together with your name and email address if you choose to give them, goes to Sentry so that we can read it and reply. Nothing is collected until you press send, and no image of your screen is ever captured. If session replay is running because you accepted it, your report is linked to that recording so we can see what led up to it.

Like session replay, the Feedback button appears on Pro Weather’s own pages only, never on a published weather site.

Visitor counting on hosted sites

Every published weather site counts its own visitors, so its owner can see how many people it reaches. This counting sets no cookies and stores no IP addresses. To tell one visitor from another within a single day, the request is hashed together with a random salt that is discarded every night, which makes the result impossible to trace back to a person and impossible to link across days. All that is retained is two numbers per site per day: how many visitors and how many page views. Because no personal data is stored and no device is identified, this requires no consent, and it runs whether or not the site owner shows the count publicly.

If you publish a site on a paid plan, you may add your own Google Analytics tag. When you do, you act as the controller for that tracking on your site and are responsible for the consent shown to your visitors; we provide the consent banner that gates it.

5. The Pro Weather app

The Pro Weather app for iOS and Android shows published weather sites on your phone. It has no accounts and no sign-in.

• Stored on your device: the stations you follow, your choice of units and language, which readings you chose to show, the station each widget shows, and the latest readings of each station so the app can still show them when you are offline. This stays on your phone and is not sent to us. Deleting the app deletes it.
• What the app sends to us: the app connects only to pro-weather.com. It asks for the list of published stations, for the readings of a station you open or follow, and, when you type a site address to add a station, for that address. These requests carry no account, no identifier, no cookie and no advertising ID.
• Widgets: home screen widgets fetch the latest readings for their station in the background, at most about every 30 minutes, using the same requests.
• Nearby stations: the app suggests stations near you by comparing your phone’s time zone setting with each station’s time zone, on your phone. It does not use your location.
• No analytics, ads or tracking: the app contains no analytics, crash reporting or advertising software, and it does not track you across other apps or websites.

Like every request to our website, the app’s requests pass through Cloudflare and then reach our server at netcup. For each request that reaches our server, we log your IP address, the time, the address requested (which names the station or the site address you typed) and the response status. We do not log the device or browser details your phone sends. We use this log to keep the Service running and secure and to prevent abuse, on the basis of our legitimate interests (section 2). We do not link it to an account or use it to build a profile of you. Entries are deleted automatically after at most 30 days. To prevent abuse, we also count requests per IP address for a few minutes.

Links in the app to pro-weather.com open in your browser, where the rest of this policy applies. To remove everything the app stored, delete the app. Your rights in section 9 also apply to the server log.

6. Who we share data with

We do not sell your personal data. We share it with service providers (processors) who help us run the Service, under appropriate data protection terms:

• netcup: server hosting (EU) for the application, database, authentication and content delivery.
• Cloudflare: delivering and protecting every request to pro-weather.com and its subdomains, including the app’s requests (global network).
• Stripe: payment processing and subscription billing.
• PostHog: product analytics and error monitoring (EU region).
• OpenAI: advertising measurement on our own website, only with your consent.
• Resend: sending Service emails.
• Google: analytics on a hosted site whose owner has added their own tag, and only with your consent.
• Google Ads: measuring which of our ads lead to signups, on our own pages only (never on hosted weather sites), and only with your consent.
• Sentry: error monitoring, the feedback form, and, with your consent, session replay on our own pages (EU region).
• OpenRouter: routing the description you type, your site title and its current style settings to an AI model, and only when you use AI styling on the Appearance page (United States).
• Station vendors (Davis WeatherLink, Ecowitt, Tempest): the source of your station data when you connect one of their accounts, which we access using the credentials you provide. Stations that send readings to your upload address involve no vendor.

We may also disclose data where required by law, or to protect our rights and the safety of users.

7. International transfers

We aim to keep data within the EU/EEA. Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

8. How long we keep data

We keep your account and site data for as long as your account is active. When you delete your account, we delete your sites, configuration, observations and stored credentials, and cancel any active subscription. Some records (such as invoices) are kept for as long as the law requires. Backups and logs are retained for a limited period and then removed.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to certain processing;
• receive your data in a portable format and ask us to transfer it; and
• withdraw consent where processing is based on consent.

You can delete your account and data yourself from the dashboard, or contact us at hello@pro-weather.com to exercise any right. If you believe we have not handled your data properly, you can lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), dataprotectionauthority.be, or your local supervisory authority.

10. Security

We use technical and organisational measures to protect your data, including encryption of sensitive credentials at rest and access controls. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately to any incident.

11. Children

The Service is not directed at children and is intended for adults. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will update the “last updated” date above and, for material changes, give reasonable notice.

13. Contact

For any privacy question or request, email hello@pro-weather.com.