Privacy policy
cloudiusz sets no cookies, runs no tracking, has no accounts and talks to no ad networks. The only thing that records your visit is the ordinary server log every website keeps, and it is deleted after 30 days.
Who runs this site
cloudiusz is built and operated by Pakumi, a software engineering studio, which is the data controller for anything described on this page.
What the server records
Like every web server, ours writes a line per request so we can keep the service running, spot abuse and fix errors. Those lines hold your IP address, your browser's user-agent string, the referring page if your browser sends one, and the address you requested — which, for a forecast, includes the coordinates of the point you looked up. Failed requests may additionally be kept with the error that occurred. Your IP address is also held in memory for about a minute to limit how many requests one address can make. Calls to the open API are recorded with the address, the endpoint (never the coordinates), the status and the duration; an address that abuses the service may be blocked, and the block is kept with the address, the reason and who set it.
We do this under our legitimate interest in operating a secure service (GDPR art. 6(1)(f)). Nobody reads these records unless something breaks or someone attacks the site, and they are deleted on a fixed schedule:
- Access log (address, browser, requested path)
- 30 days
- API request records in the operations console
- 30 days
- Error records
- 30 days
- Audit ledger of failed requests and staff actions
- 180 days
- Open API usage rows (address, endpoint, status)
- 30 days
- Rate-limit counters
- about 1 minute, in memory
What stays in your browser
- Your last searches are kept in your browser's local storage (
cloudiusz.recent) so they can be offered again. They are never sent to us. - That you have seen the privacy note is kept the same way (
cloudiusz.privacy-noted) so it does not reappear. - The selected point, layer and time live in the address bar after the
#. Browsers do not send that part to any server, which is why you can share a link to a spot without telling us about it.
Clearing site data for this website in your browser removes all of it.
Third parties your browser talks to
- Google Fonts (
fonts.googleapis.com,fonts.gstatic.com) serves the two typefaces. Loading them sends your IP address and browser details to Google, as with any resource fetched from a third party. - OpenStreetMap tiles (
https://tile.openstreetmap.org) draw the base map. The tile server sees your IP address and which map area you are viewing. Switch the basemap off in the layers panel if you prefer; the weather layers are rendered by our server. - Deutscher Wetterdienst is where the forecast comes from, but our server fetches it. Your browser never contacts DWD.
- Nominatim (OpenStreetMap's geocoder) is only asked when you press "search wider" and only receives the text you typed — our server forwards it without your IP address or any identifier.
There are no analytics scripts, tag managers, embedded social buttons or advertising networks on this site.
The admin area
The staff console under /admin uses a session cookie for signed-in Pakumi staff only. Its cookie is scoped to that path, so visitors of the public map never receive it.
Your rights
Under the GDPR you may ask for access to, correction or erasure of personal data we hold, ask us to restrict processing, or object to it. Because we keep so little, an IP address in a rotating log is usually the only thing we could match to you, and we will need the address and approximate time to find it. You may also complain to your supervisory authority — in Poland, the President of the Personal Data Protection Office (UODO).
Contact details are on www.pakumi.pl.
Changes
If what the site does changes, this page changes with it and the date at the top moves. The numbers above are read from the running configuration, so they are always what the server is actually doing.