Privacy Policy
1. Data controller
The data controller is Manzoni Etienne, Italy — tax code (codice fiscale) MNZTNN84T15F205Y. Contact: info@hailguard.org.
2. Data we collect
When you create an account we collect your email address and, if you sign in with Google, the basic profile data Google shares for authentication. To deliver alerts we store the location(s) you set (city and coordinates), your language and your plan. If you enable push notifications, we store the push subscription (a technical endpoint issued by your browser) and your device's user agent. We keep a log of the alert emails we send you (recipient, time, subject) and, for paid plans, a durable record of your consent to immediate activation given at checkout.
3. How we use your data
Your email is used for authentication, hail alert emails and essential service communications (payment receipts, changes to terms). Your location is used solely to determine which hail events are relevant to you, on the map and in alerts. We do not sell or rent your data, and we do not use it for third-party advertising.
4. Alert channels and opt-out
Push notifications can be disabled at any time from the bell icon in the app or from your browser/device settings. Alert emails contain a one-click unsubscribe link in the footer; unsubscribing stops alert emails without affecting your account.
5. Payments
Payments are processed by Stripe. We never receive or store your card details; we store only your Stripe customer and subscription identifiers. Stripe acts as an independent controller for payment data: stripe.com/privacy.
6. Service providers (processors)
We rely on: Supabase (database and authentication; data stored in the EU — Frankfurt — with row-level security); Vercel (hosting and aggregated, cookie-less visit analytics); Resend (delivery of alert emails); Mapbox (map tiles: when the map loads, your IP address reaches Mapbox as with any CDN); Open-Meteo (weather data; requests go through our server, no personal data is sent). Push notifications are delivered through your browser's push service (e.g. Google FCM for Chrome).
7. Cookies and similar technologies
The site and app use functional cookies and local storage strictly necessary for authentication and preferences (no consent required). The Meta Pixel (audience measurement for possible future advertising) is loaded only if you accept it in the cookie banner; if you decline, it is never loaded.
8. Retention
Account data is kept until you delete your account. Alert and delivery logs are kept for service diagnostics. Records of contractual consents (e.g. the checkout waiver) are kept as long as needed as proof of the contract.
9. Your rights (GDPR)
You have the right to access, rectify, delete and port your data, and to object to or restrict processing. You can delete your account and all associated data from the account deletion page or by writing to us; we process requests within 30 days. You may also lodge a complaint with your supervisory authority (in Italy, the Garante per la Protezione dei Dati Personali).
10. Contact
For any privacy-related request: info@hailguard.org