Gluggaveður Privacy Policy

Gluggaveður is operated by Kristján Andri Gunnarsson, the data controller. Contact kristjan.runic@gmail.com with privacy questions or requests. This policy covers the Android, iPhone and iPad apps, widgets, Apple Watch companion, and supporting services.

Location and preferences

With your permission, Gluggaveður uses your location to select a nearby Icelandic weather station and position the map. Android uses approximate location. You can also select stations manually. Optional background access updates your notification station while the app is closed and sends that station to our server for local weather notifications. It requires “Allow all the time” on Android or “Always” on Apple devices and retains the last Icelandic station while abroad. You can change permissions in your device’s Settings.

Favorites, preferences, cached weather, and your last selected station are stored on your device. Station information is shared with the widget, and settings and favorites sync to your paired Apple Watch.

Notifications

When you enable notifications, our server stores:

We use this information to send the weather notifications you request and handle delivery failures. Our server keeps your latest notification station. Changing it removes queued messages and delivery records associated with the previous station. Connections to our server use HTTPS. Registration changes require a secret protected by your device; the server stores its hash.

Services we use

1984 hosts our notification and weather-map services. Its infrastructure uses your IP address and request details to serve requests and limit abuse. Operational logs contain timestamps, service categories, response status, timings, response sizes, delivery counts, and diagnostic codes.

Veðurstofa Íslands supplies weather data directly to the app. Its servers receive your IP address and request details, including requested stations and language.

Apple provides maps, location services, watch connectivity, and push delivery. Apple processes map and location information according to your permissions and receives your push token and notification content for delivery. See Apple’s Privacy Policy and Maps privacy information.

Google Firebase Cloud Messaging delivers Android notifications using your Firebase installation identifier and notification content. Google also processes IP addresses and app/device technical information to operate its services. Firebase retains installation identifiers until deletion is requested, then removes associated data within 180 days. See Firebase’s privacy information.

OpenFreeMap and Esri supply Android maps. They receive your IP address, app identity, and requests identifying the map areas you view. Esri supplies satellite imagery when selected.

Service providers may process information outside Iceland and the EEA.

Retention and deletion

To delete your notification registration, turn off the main notification switch inside Gluggaveður while connected to the internet. Once the server receives the request, it deletes your registration, queued messages, and delivery history. These are also deleted when all alert categories are turned off or the push provider reports an invalid token.

Registrations expire after 35 days without a registration refresh, at the next successful cleanup. Using the app with notifications enabled can restart that period. After uninstalling the app or disabling notifications only in your device’s Settings, the server registration remains subject to this expiry.

Delivery records used to prevent duplicate messages expire after 48 hours; official-warning records expire when the warning ends or leaves the active feed. Queued messages are removed after sending, a settings change, or six hours past their scheduled delivery time. Cleanup runs every minute while the service is operating.

Local preferences remain until changed or removed with app data. Device backups, watch data, and delivered notifications are managed through your device settings.

Legal bases and your rights

We rely on consent for optional location and notification features, legitimate interests for operating and securing the service and answering support emails, and legal obligations when handling statutory requests. If you email us, we use your address and message to respond.

You can withdraw consent through the app and device settings. Withdrawal applies to future processing. Subject to applicable law, you can request access, correction, deletion, restricted processing, or a portable copy of your data, and object to processing based on legitimate interests.

Email kristjan.runic@gmail.com to exercise these rights. We may need information to identify and verify your installation. You can also complain to Persónuvernd, Iceland’s Data Protection Authority, or your local EEA supervisory authority.

We will update this policy as our practices change.