Privacy Policy | Amber Forecast

Who controls your data

Veng Digital operates Amber Forecast and is the controller of the personal data described here. CVR: 27644422. Privacy contact: contact@amberforecast.com.

The postal business address is listed at the bottom of Terms of Use.

Ordinary browsing

This policy covers forecast browsing, About and Contact on the current public website. We do not request browser geolocation or store your browsing, search or location history through the current forecast-browsing features. Catalogue coordinates describe coastal locations, not your position.

Technical request data may be processed to deliver and protect the website. Usage measurement is described under “Analytics, cookies and browser storage” below.

Who receives personal data

Hosting and infrastructure providers may process technical request data, such as your IP address, browser user agent, requested URL and timestamps, to deliver, maintain and protect the website. They may derive coarse city or country information from an IP address. This is distinct from browser geolocation; Amber Forecast does not use it to locate you.

Email delivery providers process the details in your Contact submission and delivery metadata to transmit your enquiry. Email hosting providers process correspondence to receive and store it and allow us to respond.

When you contact us

The Contact form collects your name, email address, topic and message. A submission timestamp is included in the email. We use these details to respond to your enquiry. Please avoid sending sensitive personal information that is unnecessary for your enquiry.

Amber Forecast does not store Contact submissions in its application database and does not log message content. Your enquiry is delivered by email to our contact inbox.

We retain contact correspondence for 12 months after the last exchange. We retain it longer only when needed for a complaint, dispute or legal claim.

Purposes and legal bases

For this review draft, the proposed basis for necessary website delivery and security is our legitimate interest in operating and protecting the service (GDPR Article 6(1)(f)). The proposed basis for ordinary enquiries is our legitimate interest in answering them; enquiries about entering a contract may instead fall under Article 6(1)(b). These bases and the interest assessment require legal confirmation before publication.

Correspondence needed to establish, exercise or defend legal claims may be retained on the basis of legitimate interests. The purpose and legal basis must be assessed for the particular case.

International transfers

Hosting and email services can involve processing outside the EU/EEA, including the United States. The documented safeguards for hosting and email delivery include the European Commission’s Standard Contractual Clauses. Any reliance on the EU–US Data Privacy Framework must be confirmed for the recipient and transfer concerned; this draft does not independently verify certification.

The applicable safeguards for each recipient, including email hosting, Vercel (website analytics) and Google (Firebase Analytics in the app), must be confirmed before publication. You may ask us for information about the safeguards, including a copy of the relevant clauses, at contact@amberforecast.com.

Your privacy rights

Subject to the conditions and exceptions in applicable data protection law, you may:

Ask for access to your personal data and correction of inaccurate data.
Request erasure or restriction of processing, and object to processing based on legitimate interests.
Request data portability where the legal conditions apply.
Withdraw consent where processing relies on consent, without affecting prior lawful processing.

Making a request

Write to contact@amberforecast.com to exercise your rights. We may need proportionate information to verify your identity. We respond within the applicable legal deadlines. These requests are handled through contact; this policy does not promise automated account deletion or an in-product data export tool.

You may complain to Datatilsynet, the Danish data protection authority, or another competent supervisory authority.

Datatilsynet

Analytics, cookies and browser storage

Usage analytics helps us understand how Amber Forecast is used so we can improve it. It is never used for advertising. We do not intentionally send names, email addresses or account IDs to analytics, and analytics never receives your precise location or an advertising identifier. We do not build an analytics identity that follows you across devices.

Website: we use Vercel Web Analytics to count page views and a small set of product events (starting signup, account creation, signing in, starting checkout and completing a purchase) and Vercel Speed Insights to measure page performance. Addresses are reduced to the page path and campaign (UTM) parameters before they are reported. Vercel records the referrer, browser, operating system, device type and an approximate location derived from the IP address (country, region or city). Vercel describes Web Analytics as working without third-party cookies and identifying visits by a hash of the incoming request that is discarded after 24 hours. We use no third-party advertising or tracking cookies and no persistent behavioural identity cookie. Short-lived first-party technical markers (up to 5 minutes for signup confirmation and 15 minutes for an initiated checkout) help qualify and deduplicate the corresponding analytics success event. The browser markers contain no account or payment identifier.

App: the iOS and Android apps use Google Firebase Analytics only if you choose “Allow analytics”. Collection is off until then, and declining has no effect on how the app works. You can change your choice at any time under More › Preferences; turning analytics off disables collection immediately, before the updated choice is saved. Firebase records screen views and a small set of product events (signing in, starting checkout, completing a purchase on iOS and turning Ravalarm on or off) together with a random app-instance identifier, device and app details and an approximate country or region. This data is not linked to your Amber Forecast account. Google signals, advertising features and ads personalisation are turned off, and event data is retained for 2 months.

Account, access, purchase and Ravalarm data needed to provide the service are kept in Amber Forecast’s own systems (hosted on Supabase) and are separate from usage analytics.

Analytics in the app is based on your consent (GDPR Article 6(1)(a)), which you can withdraw at any time without affecting earlier processing. The proposed basis for website usage measurement and the related assessment require legal confirmation before publication.

The current forecast-browsing features do not store per-user forecast browsing history in your browser. Language is selected through the URL.

Scope and updates

Accounts, alerts, push notifications and purchases are not ordinary features of the current public website covered by this draft. Before such services become public, the policy must be updated to describe their actual data processing.

This is a review draft, not an effective published policy. English is the source; Danish and German are review translations. Human content review and independent review are required before publication.