Introduction
Welcome to ExactSky Weather(“we,” “us,” or “our”). We operate the website accessible at exactskyweather.com(the “Service”), which provides real-time weather forecasts, news, and related meteorological information for cities worldwide.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, and the rights available to you. By using the Service you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.
This policy applies to all visitors, registered users, and anyone who accesses any part of the Service, regardless of how they access it.
Information We Collect
a) Information you provide directly
- Account registration: If you create an account via Google or GitHub OAuth, we receive your name, email address, and profile picture from that provider. We do not receive or store your OAuth provider password.
- Alert subscriptions: If you subscribe to weather alerts, we store the email address and alert preferences you provide.
- Contact inquiries: If you contact us by email, we retain your email address and message content to respond to your inquiry.
b) Information collected automatically
- Usage data: Pages visited, features used, time on site, and navigation path.
- Device & browser data: Browser type and version, operating system, screen resolution, and language settings.
- IP address: Collected by our hosting provider (Vercel) and used for geographic routing and security. IP addresses are not retained beyond server log rotation windows.
- Referrer URLs: The page or link that directed you to our Service.
c) Data stored locally on your device
- City preferences: Cities you search for or save are stored in your browser's
localStorage. This data never leaves your device unless you are signed in, in which case preferences may sync to your account. - Session cookies: Authentication session tokens are stored in
httpOnlycookies if you are signed in.
How We Use Your Information
We use the data we collect to:
- Provide the Service: Deliver weather forecasts, radar, news, and related features based on your location preferences.
- Authenticate you: Manage your account session and protect your account from unauthorised access.
- Send weather alerts: Deliver push notifications or emails for weather alerts you have explicitly subscribed to.
- Serve advertising: Display relevant advertisements via Google AdSense to fund the free Service (see Section 5).
- Improve the Service: Analyse aggregated, anonymised usage patterns to fix bugs, optimise performance, and develop new features.
- Ensure security: Detect and prevent fraud, abuse, and technical issues.
- Comply with legal obligations: Respond to lawful requests from public authorities or comply with applicable law.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
Cookies & Tracking Technologies
We use cookies and similar technologies as follows:
| Type | Purpose | Can opt out? |
|---|---|---|
| Essential | Authentication session management. Required for sign-in to function. | No (service won't function without) |
| Analytics | Vercel Analytics — privacy-first, cookieless analytics. Collects only aggregated, anonymised page views. No personal profile is built. | Opt out via browser “Do Not Track” header |
| Advertising | Google AdSense sets cookies to serve personalised or contextual advertisements. A unique ID may be associated with your browser. | Yes — see Section 5 |
You can manage cookies through your browser settings. Disabling essential cookies will prevent sign-in. Disabling advertising cookies will result in non-personalised (contextual) ads being shown where ads are present.
Google AdSense & Third-Party Advertising
We use Google AdSense to display advertisements on the Service. Google, as a third-party vendor, uses cookies (including the DoubleClick cookie) to serve ads based on your prior visits to this website and other websites.
Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ad Settings or by visiting aboutads.info. Users in the EU may also use the Your Online Choices tool.
For users in the European Economic Area (EEA), UK, or Switzerland, we obtain consent for personalised advertising where required by applicable law. You may withdraw consent at any time using the mechanism provided in the advertising consent notice.
For more information on how Google uses data when you use our Service, see How Google uses data from sites that use our services.
Third-Party Services
The Service relies on the following third-party providers, each operating under their own privacy policies:
- Open-Meteo — Weather forecast data API. Requests include only geographic coordinates (latitude/longitude) and do not include personal identifiers. Open-Meteo Terms
- OpenStreetMap / Nominatim — City search and geocoding. Queries contain only place names or coordinates. OSM Privacy Policy
- RainViewer — Live precipitation radar tile delivery. RainViewer Privacy
- NewsData.io — Weather and world news aggregation. Article fetches are server-side only; no user identifiers are transmitted. NewsData.io Privacy
- Vercel — Website hosting and edge delivery. Vercel processes server request logs including IP addresses in accordance with Vercel's Privacy Policy.
- Google / GitHub OAuth— Optional sign-in providers. If you use OAuth sign-in, the respective provider's privacy policy governs data shared during authentication.
Data Retention
- Account data: Retained for as long as your account is active. If you delete your account, your personal data is permanently removed within 30 days.
- Alert subscriptions: Retained until you unsubscribe or request deletion.
- Server logs: IP addresses in server logs are rotated automatically within 30 days by our hosting provider.
- Analytics data: Aggregated, anonymised analytics are retained indefinitely for product improvement purposes. No personally identifiable information is retained.
- Cached weather/news data: API responses cached server-side contain no personal data and expire automatically.
International Data Transfers
The Service is hosted on infrastructure that may be located in the United States, the European Union, or other jurisdictions. If you access the Service from outside the jurisdiction where our servers are located, your data may be transferred across international borders.
For transfers from the EEA, UK, or Switzerland to countries not deemed adequate by the European Commission, we rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards where required by law. Our primary hosting provider, Vercel, participates in the EU-U.S. Data Privacy Framework.
Your Privacy Rights
EEA / UK / Swiss residents (GDPR)
You have the right to:
- Access a copy of your personal data we hold.
- Rectify inaccurate or incomplete personal data.
- Erasure (“right to be forgotten”) of your personal data where there is no legitimate reason to continue processing it.
- Restrict processing of your data in certain circumstances.
- Data portability — receive your data in a machine-readable format.
- Object to processing based on legitimate interests or for direct marketing.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with your national Data Protection Authority.
California residents (CCPA / CPRA)
- Right to know what personal information is collected, used, shared, or sold.
- Right to delete personal information we hold about you.
- Right to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information.
- Right to non-discrimination for exercising your CCPA rights.
To exercise any of these rights, contact us at privacy@exactskyweather.com. We will respond within 30 days (or within the timeframe required by applicable law). We may verify your identity before fulfilling your request.
Children's Privacy
The Service is not directed to children under 13 years of age (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately at privacy@exactskyweather.com and we will delete such data promptly.
Data Security
We implement industry-standard technical and organisational measures to protect your personal data, including HTTPS encryption for all data in transit, httpOnly and Secure cookie flags, hashed tokens, and access controls on server infrastructure.
No method of electronic transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page and, where required by law, notify you by email or via a notice on the Service.
We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.
Contact Us
For privacy-related questions, data subject requests, or concerns about this policy, please contact us:
ExactSky Weather
Email: privacy@exactskyweather.com
We aim to respond to all privacy enquiries within 5 business days.