Noctar Privacy Policy

1. Data controller and contact

The data controller for the operation of the Noctar service is the app’s creator. Contact details are available in Settings.

2. What data we process

Noctar may process:

location data (if you grant permission in the browser) or approximate location based on IP,
app settings (language, theme, preferences),
saved locations (if you use this feature),
technical data necessary for the PWA to work (cache, storage).

An account in Noctar is optional – you can use the app without signing up; in that case the above data is stored only locally in your browser. If you create an account, the following is stored on our servers (with our infrastructure provider): email address (for signing in), optional display name, preferences (language, theme), your list of saved locations (name, coordinates, timezone), and the identifier of the currently selected location. Sign-in and passwords are handled by an external provider (Supabase); Noctar does not have access to your password. Noctar does not sell user data. Support payments (e.g. “Buy me a coffee” / Buy Coffee) are handled by an external provider; Noctar does not store or process payment card data.

3. Purposes

Data is used to:

display forecasts and calculations for the chosen location,
remember your settings,
enable the app to work offline (cache),
for accounts: sync your settings and locations across devices and allow you to export or delete your data.

4. Data sources and recipients

The app fetches data from external services (e.g. Open-Meteo, GFZ, Auroras.live, NOAA SWPC/RTSW, geo-tz, ipapi/ip-api). Requests sent to them may include coordinates or approximate location needed to retrieve forecasts. Account data is stored with our infrastructure provider (Supabase).

5. Legal basis

consent (e.g. location access in the browser),
performance of contract / provision of the service (account data when you use an account),
legitimate interest (ensuring the service works, security, cache).

6. Storage

Settings and saved locations are stored locally in your browser (local storage / indexedDB) until you delete them. If you have an account, account data (email, display name, language, theme, saved locations) is also stored on our servers until you delete your account. In Account settings you can at any time export your data (a copy in text format) and permanently delete your account and all associated data.

7. Your rights

You may at any time:

withdraw location consent in browser settings,
delete the app’s local data (clear in Settings),
if you have an account: export your data and delete your account (and all associated data) from Account settings,
contact us about privacy.

8. Security

We apply standard security measures appropriate for a web application. No system can guarantee 100% security.

9. Changes to this policy

This policy may be updated. The current version is always available in the app.