Privacy policy

Drizz.li is built to need as little of your data as possible: there are no user accounts, no cookies, no advertising and no analytics or tracking scripts. This page explains what little processing does happen - when you browse the site, and when you support the project with a contribution.

1. Controller

Vincent van der Wal
[Street and number], [Postal code, City], [Country]
Email: drizzli@vincentvanderwal.nl

This policy covers the websites drizz.li (the weather app) and support.drizz.li (the supporter signup page).

2. Browsing the site

Weather data requests

Drizz.li is a static site: when you open a forecast, your browser fetches the weather data directly from the open-data APIs of Open-Meteo (api.open-meteo.com, geocoding-api.open-meteo.com, archive-api.open-meteo.com, ensemble-api.open-meteo.com, and map tiles from maps.open-meteo.com / map-tiles.open-meteo.com / map-assets.open-meteo.com). Like any web request, this transmits your IP address and the requested location or search term to Open-Meteo. We do not receive or store any of this. See Open-Meteo's terms and privacy information. Legal basis: our legitimate interest in delivering the content you request (Art. 6(1)(f) GDPR).

Hosting

The static site is served by [hosting provider, location]. The hosting infrastructure may keep short-lived technical server logs (IP address, requested URL, timestamp) for security and operations. Legal basis: legitimate interest in a secure, reliable service (Art. 6(1)(f) GDPR).

Settings on your device (local storage)

Your preferences - theme, measurement units, last searched location, and (for supporters) your access key and its last verification result - are stored only in your browser's local storage. They never leave your device except as described below for key verification, and you can clear them at any time via your browser.

3. Supporting the project (contributions)

Supporter contributions unlock the supporter extras, so legally they are a paid agreement, not a pure gift - and this is what we process to handle them:

Signup form

• Email address (required) - to send you the transfer details and, after your contribution arrives, your access key.
• Name (optional) - to help match your bank transfer.
• Currency and amount - shown based on your browser's locale/timezone, detected on your device (no geolocation request is made).
• IP address and technical anti-bot signals - kept with the signup request to prevent abuse and spam of the form.
• Payment reference (e.g. DRZ-XXXXXX) - generated per request to match your transfer to your signup.

The transfer details (bank account and reference) are sent to you by email rather than shown on the page. Legal bases: performance of the agreement (Art. 6(1)(b) GDPR) and, for the anti-abuse measures, legitimate interest (Art. 6(1)(f) GDPR).

Bank transfer

Contributions are paid by ordinary bank transfer. Your bank and ours process the transfer data under their own responsibility; on our bank statement we see the usual transfer details (your name, account number, amount, reference). We use them only to match your contribution and are required to retain accounting records under statutory bookkeeping and tax law (Art. 6(1)(c) GDPR).

Access key and verification

After your transfer is matched (manually, usually within 24 hours), you receive an access key by email. When you paste it into Drizz.li, your browser sends the key to our verification endpoint (support.drizz.li) to check whether it is active; the response contains only the validity, tier and expiry. The subscriber list (key, email, expiry) is stored on our server for as long as your access is active.

Email

Transactional emails (transfer details, access key, renewals) are sent through our email provider, Strato (Strato AG, Germany), acting as a processor. We send no newsletters or marketing email.

4. Retention

• Signup requests that are never paid are deleted after 6 months at the latest.
• Supporter records (key, email, expiry) are kept while your access is active and deleted within 12 months after it expires, unless you ask us to delete them sooner.
• Accounting records (bank statements showing your transfer) are kept for the statutory retention period (up to 10 years, depending on jurisdiction).

5. Recipients

We do not sell or share personal data with third parties for their own purposes. Recipients are limited to: Open-Meteo (weather requests made directly by your browser), our hosting provider, our email provider (Strato), and the banks involved in your transfer.

6. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, email drizzli@vincentvanderwal.nl. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, or with [competent supervisory authority of the controller].

For visitors from Switzerland: the corresponding rights under the Swiss Federal Act on Data Protection (FADP) apply equivalently.

7. Changes

We may update this policy when the service changes; the date above reflects the latest revision.