Privacy
StormTrak by TorTrak uses the information below to provide weather, account and optional subscription services. Contact scatrbrain@pm.me for privacy questions or account, reservation and related data deletion requests.
Accounts and reserved rates
Sign-in is optional during Early Access. If you sign in, Google Firebase processes your email address, account identifier and sign-in activity to deliver email links or authenticate your Google account. StormTrak verifies that identity on its server. Your browser saves your sign-in until you sign out or remove its data.
To honor an existing reserved rate, StormTrak stores your Firebase project and account identifiers, account creation and reservation dates, policy version, reserved price and reservation status. Reservation records do not contain weather history, saved places, email addresses or sign-in credentials. These records are retained with your account and included in protected operational backups. Signing in does not upload or synchronize saved places, preferences or storm history. Creating an account does not authorize a future payment.
Optional subscriptions
Stripe processes payment details and information supplied through its payment form or billing portal. StormTrak does not store your card number or security code.
StormTrak stores the Stripe customer, checkout, subscription and invoice references associated with your verified account; your selected plan and add-ons; payment and subscription status; cancellation and scheduled-change dates; and the billing-operation records needed to reconcile requests and events. It also stores verified live payment and subscription linkage when applying a reserved rate. Test and live billing records are kept separately.
These records let us operate your subscription, show its status, prevent duplicate operations, recover interrupted requests and honor a reserved rate. They are held on our server and included in protected operational backups. Stripe maintains its own records under its privacy policy. Contact us about access or deletion requests; billing records may need to remain where necessary to resolve a transaction or meet applicable recordkeeping requirements.
Locations and weather requests
City and ZIP searches use a bundled place list; typed searches are not sent to a search provider. Your eight recent locations, last selected point, saved weather places, preferences and storm history stay in this browser rather than being synchronized to an account profile. Clear location stops automatic return to the selected point. Forget in Recent locations removes the saved list and return point.
Device location is optional. We request it once when you select Use my location and your browser permits it; you can enter a city or ZIP instead. Selected coordinates reach StormTrak's server and the National Weather Service for time-zone, forecast and nearby-station lookup. They also reach StormTrak's server to sample shared NOAA precipitation grids and assess recent radar movement; that lookup does not send your location to NOAA. Lookups and station readings may be cached. Map and radar providers receive requests for the area you view and ordinary connection information, including your IP address.
Wind transparency, layer choices, SPC selections, map preferences and the history window are saved locally. Open menus, temporary tool work and weather readings are not saved. Clearing local location data cannot erase requests already received by providers.
Optional analytics and operational records
First-party session analytics is on by default for requests matched to the US using a local approximate country lookup. Outside-US and unknown-country requests remain aggregate-only. Session analytics records fixed page labels and deliberate feature actions with random temporary identifiers shared between tortrak.com and storm.tortrak.com. These are separate from sign-in cookies and do not identify verified people. Server-observed IP addresses may be linked to sessions; shared addresses do not prove one person's identity. Approximate country, region and network information may be looked up locally without sending visitor IP addresses to an external resolver.
When you select a location, analytics records the chosen city or ZIP. For a map pin or device location, it records the nearest town and a point rounded to about seven miles. It also records the StormTrak summary shown, browser, operating system, device type and screen size. It does not record street addresses, exact pin/device coordinates, map centers, form or feedback content, full URLs, query strings, fragments, credentials or raw cookies/headers. The owner may compare IP addresses and times with separate security evidence to investigate abuse.
Detailed analytics events, identifiers, IP links and enrichment caches expire within 14 days and are excluded from automatic backups. Separate security records retain IP evidence for at most 14 days and have no automatic backups. Non-IP aggregates retain hourly totals for seven days and daily totals for 400 days, with aggregate backups for seven additional days.
The existing Turn off optional usage analytics control in StormTrak's Location & privacy panel stops new optional collection and removes the dedicated analytics cookie. Previously collected details remain subject to the 14-day limit. The preference applies to both sites; older host-specific opt-outs are respected. Global Privacy Control and Do Not Track also stop optional first-party metrics. Operational security remains active. These metrics are not sold or used for targeted advertising; analytics failures do not prevent weather use.
Statcounter receives ordinary visit information and may use cookies or browser storage on the public weather page. We do not send it selected coordinates or search text. Google Analytics uses the same analytics preference and receives ordinary visit information, page paths without query strings, titles and referring pages, with first-party cookies. Account sign-in pages do not load optional usage analytics. We do not send selected coordinates, search text or account details to Google Analytics; Google signals and advertising personalization are off. These providers apply their own retention policies. Hosting and weather providers may keep operational logs under their own policies.
Feedback
Feedback records include the message, category, submission time, app version, page name and broad screen-size class. StormTrak does not save location, a screenshot, full URL, browser identifier or IP address with the feedback message. When feedback verification is enabled, Cloudflare Turnstile processes connection and browser information to detect automated submissions; verification tokens are not stored with messages. Please avoid personal information in feedback. Deleted messages may remain in protected backups for about two weeks.