What we collect
- Email address — so we can send you forecasts
- Your preferences — region, craft type, cadence (daily/weekend/firing)
- Delivery status from our email provider — sent, bounced, unsubscribed
- Coarse API usage data — truncated IP prefix (never full address), user agent, path hit. Retained 30 days for abuse prevention.
What we don't do
- Sell or share your data with third parties
- Track you across other websites
- Send marketing emails beyond forecast updates
- Store credit card details (we don't charge for the forecast)
Where your data lives
Your email and preferences are stored in Cloudflare KV — an edge key-value store with servers in the UK, Europe, and globally. Email delivery is handled by Loops.so, who process your email address solely to send you the messages you've subscribed to.
Legal basis (UK / EU GDPR)
We process your email under legitimate interest to deliver the forecast service you signed up for. When you signed up, you asked us to send you forecasts — that's the agreement. You can withdraw your consent at any time by unsubscribing (see below).
Retention
- Subscriber record (email + preferences) — kept until you unsubscribe, then deleted within 48 hours.
- API usage logs — 30 days, then automatically deleted.
- Aggregated forecast quality data — retained indefinitely for product improvement, with no personal identifiers.
Your rights
Under UK and EU GDPR you have the right to:
- Access — ask for a copy of the personal data we hold about you
- Rectify — correct anything that's wrong
- Erasure — have all your data deleted (the "right to be forgotten")
- Portability — receive your data in a machine-readable format
- Object — opt out of any processing you disagree with
- Complain — raise a concern with the UK Information Commissioner's Office or your local EU data protection authority
To exercise any of these, email info@surfrash.xyz with the subject "GDPR data request". We'll respond within 30 days.
Unsubscribing
Click the unsubscribe link at the bottom of any forecast email, or reply with the word "unsubscribe". We'll remove your record within 48 hours.
Cookies
We don't use tracking cookies. The site stores your unit preferences (kts/mph, m/ft) in your browser's local storage so you don't have to set them each visit. That data never leaves your device.
Changes to this policy
If we materially change how we handle your data, we'll update this page and email active subscribers. The "last updated" date at the top always reflects the current version.
Contact
Questions? info@surfrash.xyz.