Privacy Policy
Effective October 20, 2026. This policy explains what personal information Jack Schulz, doing business as wxdeck (“wxdeck”, “we”) collects when you use wxdeck.com, why, who we share it with, and the rights you have.
wxdeck is operated by Jack Schulz, an individual doing business as wxdeck, in Indiana, United States.
The short version
We collect what we need to sign you in, show you weather for the places you choose, send the alerts you ask for, and keep the Service secure. You can download or delete your account data yourself at /account.
1. What we collect
From your Google account
When you sign in with Google, we ask Google only for your basic profile: your name, email address, profile picture and the identifier Google uses for your account. We store those, and the sign-in tokens Google issues for that basic profile. We do not receive your Google password and do not ask for access to your Gmail, Drive, contacts or calendar. Our use of information received from Google APIs follows the Google API Services User Data Policy.
Locations
- Saved locations. When you save a location we store the latitude and longitude you chose and any name you gave it. A saved location is a precise point — it may be your home, work or another place that matters to you — so we treat it as sensitive. We use it only to show you weather there, send alerts for it, and measure how accurate our forecasts were there. To measure that, we record the forecasts we showed for the place while it is saved.
- “Use my location”. If you press it, your browser asks your permission and then gives the page your device’s current position. We use it to centre the map and fetch weather for that point. We do not store it unless you save it as a location. You can revoke the permission in your browser settings at any time.
- Points you look at and places you search for. To show weather for any point on the map, the coordinates are sent to our servers, and from there to the weather providers listed on our Credits page. A place name you type into search is sent the same way to the geocoding provider listed there. Those requests carry the point or the search text, not your name or account.
Push notifications
If you turn on alerts, your browser creates a push subscription — a web address at your browser maker’s push service (for example Google, Mozilla, Apple or Microsoft) plus two encryption keys. We store those, linked to your account, so we can send you alerts. We delete a subscription when you turn alerts off, when you delete your account, or when the push service tells us it no longer exists. We also remember which warnings we have already sent for each saved place, so you are not notified twice about the same one.
Settings on your device
Your display settings (layers, units, map style and similar) are kept in your browser’s local storage under the key wxdeck:settings:v1. They stay on your device and are not sent to us. Clearing your site data removes them. See the Cookie Policy.
Payments
None. wxdeck is free during its beta. If paid plans are introduced, these terms and the privacy policy will be updated before anyone is charged. We do not collect card or other payment details.
Email you send us
If you email us, we keep your message and your address so we can answer it.
Server logs
Like every website, our hosting provider records each request: your IP address, browser user agent, the page or data requested, the time, and the response. We use these to keep the Service running and secure.
We do not collect your precise location in the background, your contacts, or any information about you from data brokers.
2. How we use it
| Information | What we use it for | Kept until |
|---|---|---|
| Your account and linked Google account (name, email, picture, Google identifier, sign-in tokens) | Signing you in and showing who is signed in | Until you delete your account at /account, when they are deleted |
| Saved locations | Weather and alerts for the places you chose; checking our forecasts against what happened there | Until you remove the place or delete your account. A place we have not yet recorded forecasts for is then deleted. A place we have recorded forecasts for is detached instead: its name and its link to you are deleted, and its coordinates and those forecasts are kept, belonging to no one, so our accuracy records stay correct |
| Alert devices (push subscriptions) | Sending the alerts you turned on | Until you turn alerts off, delete your account, or the push service reports the subscription gone |
| Record of alerts already sent for a place | Not notifying you twice about one warning | Until shortly after the warning ends, or until you remove the place or delete your account |
| Email you send us | Answering you | As long as needed to answer you and keep a record of the conversation |
| Server logs (IP, user agent) | Security, abuse prevention, debugging | Kept by our hosting provider, Vercel, for up to 30 days |
Deleting your account at /account takes effect straight away for everything in the table above except server logs, which age out as the table says, and email you sent us. It also signs out the browser you used; another device that is still signed in can no longer reach any of your data. Our database provider keeps a short rolling history for recovery, so deleted records can remain there until that history rolls over.
We do not use your information to build advertising profiles, and we do not make decisions about you that have legal or similarly significant effects using automated processing.
3. Who we share it with
We share personal information only with the service providers that run the Service for us, and only so they can do that:
- Hosting, content delivery and server logs: Vercel
- Database: Neon
- Domain name system and forwarding of email sent to our addresses: Cloudflare
- Our mailboxes, where your email to us is kept: Google Workspace
- Sign-in: Google, which already holds your account and learns that you signed in to wxdeck
- Push delivery: your browser maker’s push service, which carries the alert to your device
We may also disclose information if the law requires it, to protect someone’s safety, or to a company that takes over the Service — in which case this policy keeps applying to what we hold about you.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the past 12 months.
4. Security
Traffic to wxdeck.com is encrypted with HTTPS. Secrets stay on our servers and never ship to your browser. Access to our databases is limited to the people and systems that need it. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.
5. Your privacy rights
Wherever you live in the US, you can ask us to:
- tell you what personal information we hold about you;
- give you a copy of it in a portable format;
- correct it if it is wrong;
- delete it;
- not sell or share it, and not use it for targeted advertising or profiling — we do none of these, but you can still ask;
- limit our use of sensitive information, such as a saved location, to what is needed to provide the Service — which is already all we use it for.
We will not treat you differently — in price, quality or access — for exercising any of these rights.
How to make a request
You can do the two most common ones yourself, signed in, at /account: Download my data gives you a copy of your account data as a file, and Delete my account deletes it once you type the confirmation it asks for (what is kept afterwards is described in section 2). For anything else, email privacy@wxdeck.com from the address on your account. We will confirm we received it within 10 business days and answer within 45 days; if we need more time, the law lets us take up to another 45 days, and we will tell you why. We verify a request by matching it to your signed-in account. If we deny a request, we will explain why, and you can appeal by replying to our answer with “appeal” in the subject. We will answer an appeal within the time your state’s law sets. If we deny the appeal, you can contact your state attorney general.
Authorized agents
Someone you authorise can make a request for you. We will ask for your signed permission and may ask you to confirm your identity with us directly.
Global Privacy Control
If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising, for that browser and for your account if you are signed in. Since we do none of these, it does not change what you see.
6. California residents
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights in section 5: to know, to delete, to correct, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be discriminated against for using them.
Do Not Sell or Share My Personal Information: we do not sell or share personal information, as the CCPA defines those words, so there is nothing to opt out of. We honour Global Privacy Control as described above. We do not knowingly sell or share the personal information of anyone under 16.
In the past 12 months we collected these categories: identifiers (name, email, IP address, account and push identifiers); internet activity (server logs); geolocation data (saved locations and points you choose); and sensitive personal information (precise geolocation you chose to save). Sources, purposes, recipients and retention are in sections 1 to 3. We use sensitive personal information only to provide the Service you asked for.
7. Other US states
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with consumer privacy laws have rights under those laws. We give every US user the rights in section 5, whether or not their state requires it, and handle requests and appeals the same way. Where a state requires consent before processing sensitive data, such as precise geolocation, saving a location is that consent, and you can withdraw it by removing the location, with the effect section 2 describes.
8. Nevada residents
We do not sell covered information as Nevada law defines it. You may still submit a request directing us not to sell it by emailing privacy@wxdeck.com.
9. Do Not Track
There is no common standard for browser Do Not Track signals, so we do not respond to them. We do not track you across other websites in any case. We do honour Global Privacy Control, as section 5 says.
10. Children
The Service is not directed to children, and you must be 18 to have an account. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, email privacy@wxdeck.com and we will delete it.
11. Email
We do not send marketing email today, and there is no newsletter. If we start, every message will carry an unsubscribe link and a postal address.
12. Push notifications and location permissions
Both are off until you turn them on, and your browser asks for your permission first. You can turn alert notifications off in the app, and you can revoke either permission at any time in your browser or device settings. Revoking it stops us using it straight away.
13. Users outside the US
The Service is operated from and hosted in the United States, and your information is processed there. We do not target or market the Service to people in the European Union, the European Economic Area or the United Kingdom.
14. Changes to this policy
If we make a material change, we will tell you before it takes effect, by email to the address on your account or by a notice on the site. We will not use information we already hold in a materially different way without your consent. The date at the top shows the current version.
15. Contact
wxdeck is operated by Jack Schulz, an individual doing business as wxdeck, in Indiana, United States. Privacy questions and requests: privacy@wxdeck.com. We do not publish a postal address; contact us by email at legal@wxdeck.com.