Privacy Policy
Effective 25 October 2026.
The short version
We are a weather data API. Our customers are developers, and the thing we actually need to know about you is an email address and how many requests you made. That is close to all we hold.
We do not record the IP addresses of API requests or of website visits. That is a deliberate choice in how our logging is configured, not an accident of scale, and it is described precisely below. We set no advertising or analytics cookies, and we do not sell or share personal information for advertising.
What we collect
Account information
When you sign up we store your email address, an account identifier from our authentication provider, your plan, your API key, the dates your trial starts and ends, and a record of which notification emails we have already sent you so we do not send them twice.
We never see your password. Authentication is handled by Google Firebase Authentication; your password is set with them and we receive only a signed token confirming who you are.
We keep your API key itself because the only way to revoke a key at our edge is to hold the value that identifies it. It is never shown again after you create it and is never returned by any API.
Usage records
For every day you use the API we store a row containing your key label, the date, the number of requests, how many were billable, and the bytes served. This is how your account page works and how invoices are calculated. It is tied to your key, not to any individual person.
API request logs
Requests to the API are logged with six fields and no more:
- date and time
- the label identifying which customer made the request
- bytes served
- the path requested, for example
/tiles/composite/… - the HTTP status returned
There is no IP address, no user agent, and no referrer in these logs. We cannot tell from them who your end users are, where they were, or what device they used — because we never asked for those fields.
Website logs
Visits to splitshotweather.com are logged with date and time, the page requested, the HTTP status, the referring URL, the browser user agent, and a two-letter country code. These let us tell a real visitor from a vulnerability scanner and see whether anyone arrives from a search engine. No IP address is recorded, so the country is as precise as our location data gets.
Support email
If you email support@splitshotweather.com, that message is received by our mail provider, stored briefly, and forwarded to the inbox we read. We keep the correspondence as long as we need it to deal with your question.
Payments
Payments are handled by Stripe. We never receive or store your card number. We see the fact of a payment, the amount, and enough information to match it to your account.
What we deliberately do not collect
- IP addresses, of your API requests or of website visits.
- Anything about your end users. Tile requests reach us carrying your key, not their identity. We do not know who they are and have no way to find out.
- Card numbers or bank details.
- Passwords.
- Advertising or cross-site tracking identifiers.
Cookies and browser storage
We set no analytics cookies, no advertising cookies, and run no third-party tracking scripts. There is no cookie banner on this site because there is nothing to consent to.
When you sign in, our authentication provider stores a session token in your browser so you stay signed in. It is strictly necessary for the signed-in area to work, and signing out clears it.
Who else processes your data
| Provider | What they do |
|---|---|
| Amazon Web Services | Hosting, content delivery, databases, logs, and sending our email |
| Google (Firebase Authentication) | Sign-in, password handling |
| Stripe | Payment processing |
These providers process data on our instructions in order to run the service. We do not sell personal information, and we do not share it for advertising or cross-context behavioural advertising.
How long we keep it
| What | Kept for |
|---|---|
| API request logs | 35 days |
| Website visit logs | 90 days |
| Support email | 90 days in our mail store; forwarded copies as long as needed |
| Daily usage totals | While your account exists, as the billing record |
| Account details | While your account exists |
Raw logs expire automatically on the schedules above. Usage totals outlive them because they are what lets us answer “what did you bill me for” after the underlying logs are gone.
Your rights and choices
Whatever law applies to you, we will do these things on request:
- See what we hold. Most of it is already on your account page; email us for the rest.
- Correct it. Tell us and we will fix it.
- Delete it. We will delete your account, key, and account details. We may keep usage and payment totals where we are required to for tax and accounting.
- Export it. We will send your account and usage records in a machine-readable form.
- Object or restrict. Tell us what you object to and why, and we will deal with it.
Email support@splitshotweather.com and we will respond within 30 days. We will not charge you for this and we will not treat you differently for asking.
Transactional email — your trial ending, your key being blocked, changes to our terms — is part of the service and cannot be unsubscribed from while you have an account. We do not send marketing email.
Security
Traffic is encrypted in transit with TLS. Stored data is encrypted at rest. Access to production systems is limited to the operator of the service. API keys are transmitted only in a request header or query string over HTTPS, are never written to our logs, and are never returned by any API after creation.
No system is perfectly secure. If you find a vulnerability, please tell us at support@splitshotweather.com before disclosing it publicly, and we will work with you.
Children
This is a developer tool sold to businesses. It is not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, tell us and we will delete it.
Where data is held
The service runs in the United States and your data is processed there. If you are outside the United States, using the service means your information is transferred to and handled in the United States, where privacy law differs from your own.
Changes to this policy
If we change what we collect or who processes it, we will update this page and change the effective date at the top. For changes that materially affect your rights we will email the address on your account.
Contact
Splitshot Weather, operated by Christopher Vrooman, Colorado, United States · support@splitshotweather.com