Privacy Policy
StormAtlas ("we," "us," or "our") respects the privacy of every visitor. This Privacy Policy explains how we collect, use, retain, protect, and disclose technical information when you access or use our WebGIS meteorological tracking platform and emergency preparedness knowledge base.
1. Information Collection & Telemetry
StormAtlas does not require user account registration, passwords, or identity documents to access its live storm-tracking features. We may automatically process limited technical telemetry associated with website operation, security, and performance, including IP address information that may be truncated or otherwise de-identified where technically feasible, browser type, device characteristics and screen resolution, referring URL, operating system, and client-side map viewport information. If you voluntarily grant browser location permission to identify nearby storm activity, the resulting geographic coordinates are processed within the applicable browser session for that feature and are not intentionally retained as a persistent location record on our backend servers.
2. Purpose of Data Processing & Legal Basis
We use technical telemetry only as reasonably necessary to operate, secure, maintain, and improve the platform, including delivering WebGIS map tiles, optimizing real-time storm-track rendering, diagnosing network or performance issues, understanding aggregate regional interest, preventing abuse, and providing reliable access to public safety and preparedness information. Where the GDPR applies, processing may be based on our legitimate interests in operating, securing, and improving a reliable public-interest information service (Article 6(1)(f)), where those interests are not overridden by applicable individual rights, and on consent where consent is legally required for optional cookies, personalized advertising, or browser-based location features (Article 6(1)(a)).
3. Data Retention & Storage Limitations
Technical telemetry and server access records are generally retained for no longer than 30 days unless a longer period is reasonably necessary for security, fraud prevention, legal compliance, dispute resolution, or other legitimate operational purposes. Where appropriate, records may be aggregated or de-identified before retention. We do not sell or rent personal information. We do not exchange personal information for monetary consideration. Information may be disclosed to service providers and infrastructure partners, such as Cloudflare and Supabase, only as reasonably necessary to provide hosting, storage, content delivery, security, caching, database, or DDoS protection services, or where disclosure is required by applicable law, valid legal process, or a lawful governmental request.
4. Data Security Safeguards
We maintain reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, destruction, or loss. Depending on the applicable system and service, these measures may include encryption in transit using modern TLS protocols, Content Security Policy (CSP) controls, access controls, distributed edge infrastructure, logging, monitoring, vulnerability management, and automated security protections. No internet transmission or storage system can be guaranteed to be completely secure.
5. Cookies, Google Analytics & Google AdSense Disclosures
StormAtlas and certain third-party service providers, including Google where enabled, may use cookies, web beacons, pixels, local storage, and similar technologies to operate the website, understand traffic and usage patterns, measure advertising performance, and deliver or personalize digital advertising where permitted by law and applicable user choices. Google may use advertising cookies and related technologies to serve and measure advertisements based on a user's visits to this and other websites or services. Where required by applicable law, non-essential cookies and similar technologies are used only after obtaining the required consent. You may manage available cookie choices through our Cookie Preferences mechanism and may control personalized advertising through Google Ads Settings (https://www.google.com/settings/ads), the Network Advertising Initiative opt-out resources (https://www.aboutads.info), or the European Interactive Digital Advertising Alliance resources (https://www.youronlinechoices.eu). Availability and functionality of third-party opt-out tools may change over time and are governed by the respective provider's policies.
6. CCPA, GDPR, COPPA & User Rights
Where applicable, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), the GDPR, and other privacy laws may provide individuals with rights concerning their personal information or personal data, including rights to request access to or information about applicable data practices, correction, deletion, restriction or objection to certain processing, portability where legally applicable, and withdrawal of consent. California residents may also have applicable rights to opt out of certain forms of sale or sharing of personal information and to receive equal treatment for exercising their statutory rights. We do not sell personal information. Requests are subject to applicable legal requirements, verification procedures, exceptions, and limitations. StormAtlas is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13 in violation of applicable law, including COPPA.
7. Policy Updates & Contact Information
We may update this Privacy Policy from time to time to reflect changes in our technology, services, data practices, or applicable legal and regulatory requirements. Material changes will be presented in an appropriate manner where required by law. For privacy inquiries, applicable data-rights requests, deletion requests, or compliance questions, please contact us at storms@stormatlasx.com.