Privacy policy.

Atmostorm is built to be useful with as little personal data as possible. You can browse the map, radar, alerts, and location pages without an account, without signing in, and without us building a profile of you. This page explains what we do collect, why, and who else is involved.

What we collect when you just browse

• Standard server logs (IP address, user agent, the URL requested) are kept for a short period — roughly 30 days — and used for security, abuse prevention, and rate limiting.
• If you search for a location, the search text is sent to our geocoding backend to resolve it to a place, and may be cached for up to 24 hours.
• If you use "use my location," your browser shares your approximate or precise location with your permission. We use it in your browser to center the map and find nearby conditions; we don't store it unless you explicitly save a location to your account.

If you create an account

Accounts are optional and used for saved locations, push alerts, and donations. When you register we collect:

• Your email address and a securely hashed password (we never store it in plain text).
• An optional display name, if you provide one.
• Preferences you set yourself — saved locations and alert subscriptions.
• If you enable push alerts, a web-push subscription from your browser (see "Push notifications" below).

We do not sell your personal data, and we don't share it with advertisers. You can delete your account and associated data by contacting us at the address below.

Cookies and local storage

• Anonymous browsing does not require cookies from us. Our privacy-focused analytics (below) is cookieless.
• If you sign in, we set a session cookie to keep you logged in and store a copy of your basic profile in your browser's local storage so the app loads faster. These are functional, not advertising.
• We use no advertising or cross-site tracking cookies. Third-party content you choose to load (such as an embedded YouTube video — see below) may set its own cookies once you interact with it.

Analytics and error monitoring

• Cloudflare Web Analytics — privacy-first, cookieless, aggregate page-view analytics. It does not track you across sites and does not build an advertising profile.
• Sentry — application error monitoring (front end and back end). When something breaks it records diagnostic details about the error, which can include your IP address, browser, and the page involved, so we can fix it.

Donations

Donations are processed by Stripe. Payment happens on Stripe's hosted checkout — we do not receive or store your card number or payment credentials. Stripe's handling of your payment information is governed by its own privacy policy.

Email

If you have an account, we use Postmark to send transactional mail (such as sign-in verification and password resets) and occasional product/feedback email. Every non-transactional message includes an unsubscribe link.

Push notifications

If you opt in to push alerts for a saved location, your browser creates a web-push subscription that we store to deliver alerts. Delivery routes through your browser vendor's push service (for example Google, Apple, or Mozilla). You can revoke push access at any time in your browser or account settings.

Third-party services

Some content and data are served by third parties. When your browser requests a map tile, geocodes a search, or loads an embedded video, that provider sees your IP and request. We cache aggressively to minimize this.

• Map tiles and geocoding (e.g. OpenFreeMap, Nominatim).
• Weather and imagery feeds (NOAA/NWS, the Storm Prediction Center, NASA GIBS, Iowa Environmental Mesonet, Open-Meteo).
• Embedded YouTube video on the outlook page. It loads only after you click play (a static preview shows until then), and once played, YouTube may set its own cookies.
• Text-to-speech for our narrated videos (OpenAI). Only fixed, computer-generated weather text is sent — never your personal data.
• Cloudflare, Sentry, Stripe, and Postmark, as described above.

Our social media posts

Atmostorm automatically posts public severe-weather information (radar clips, warning summaries, daily outlook videos) to platforms such as Facebook, Instagram, YouTube, and TikTok. These posts contain public weather data only — never your personal information.

Children

Atmostorm is not directed to children under 13, and we do not knowingly collect personal information from them.

Your choices

You can browse without an account, decline location access, unsubscribe from email, revoke push notifications, and request access to or deletion of your account data by emailing us. To stop analytics entirely, you can use your browser's tracking protection or a content blocker.

Changes

We may update this policy as the product evolves. We'll revise the date above, and we'll note significant changes on the site or by email to registered users.

Contact

Questions about privacy: privacy@atmostorm.com