Altiwind is built to need as little personal data as possible. Free users have no account, and our servers never receive your exact location.
Who is responsible
The controller for your personal data is Henrique Saraiva, Portugal. Contact: privacy@altiwind.com.
What we process and why
| What | When | Why (lawful basis) | Kept for |
|---|---|---|---|
| Location rounded to a grid of about 5 km | Every forecast request | To fetch the forecast for your area (legitimate interest, Art. 6(1)(f) GDPR) | Not stored. Cached forecasts are keyed by grid cell only |
| Your settings and saved spots | In the web app | Stored on your own device (browser storage), never sent to us as such | Until you clear them |
| Email address, language, sign-up page, time of consent | Email list | To send launch news and tips you asked for (consent, Art. 6(1)(a)) | Until you unsubscribe |
| Technical data such as IP address | Every request | Delivering the site and protecting it from abuse (legitimate interest) | Handled by Cloudflare for a short time; we keep no access logs |
| Visit statistics: page address, the site you came from, phone or computer, seconds the page was in use, and an anonymous visitor code that changes every day | Once per page, after you click, tap or type | Knowing which pages are useful (legitimate interest) | 13 months. The daily code is a one-way hash of a random value that is discarded each day, your IP address and your browser name; the IP address itself is never stored |
| Name, email address, topic, message and the page you wrote from | When you use the contact form | To answer you (your request, Art. 6(1)(b)) | Not stored on the site: the message reaches us by email and we delete it after 12 months. To stop abuse we count, for 24 hours, how many messages leave each device, using the same anonymous daily code as the visit statistics |
| Place name of your 5 km grid square | When you use your current location in the app | To show which place the forecast is for (legitimate interest) | Not stored. Our server looks up the grid square, never your exact position |
We do not use advertising, tracking cookies or third-party trackers. Our own visit statistics use no cookies; open this link to stop counting your device (your browser remembers the choice). We also use Cloudflare Web Analytics, which counts page views without cookies and without building profiles.
Who processes data for us
- Cloudflare, Inc. hosts the website, the app, our API and its database (Workers, D1, KV), and delivers contact form messages to us (Email Routing).
- Brevo (Sendinblue SAS, France) sends our emails.
- OpenStreetMap Foundation (Nominatim) turns the grid square of your current location into a place name; it receives only the grid square, from our server.
Weather data comes from Open-Meteo, NOAA and other public sources. Our server asks them for a grid cell, never for anything about you.
Where a provider processes data outside the EU/EEA, it does so under the European Commission’s standard contractual clauses or the EU–US Data Privacy Framework.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Where we rely on consent (the email list) you can withdraw it at any time, for example with the unsubscribe link in every email. Write to privacy@altiwind.com. You can also complain to the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
Children
Altiwind is not directed at children under 16, and we don’t knowingly collect their data.
Changes
If this policy changes we will update this page and the date above.