Privacy

Updated October 14, 2026

Hindcast (hindcastweather.com) is run by Pablo Miranda, who is responsible for the personal data described here. Questions and requests: support@pablin.me.

The short version

No ads, no trackers, no selling data. Without an account we don’t store anything about you. Locations are rounded to an 11 km area in your browser before they reach us.

If you use Hindcast without an account

• Your browser rounds your location to a 0.1° grid area (about 11 km) before any request.
• We keep counts per area (for example, when an area was last viewed) to decide which areas to score each night. These are not linked to you.
• Saved places on the free plan stay in your browser’s local storage and never reach us.
• Our hosting provider, Cloudflare, processes your IP address to deliver the site and protect it from abuse. We don’t use it to identify or profile you.
• We don’t use cookies for analytics or any third-party trackers. Fonts, maps and search are served from our own domain.
• Visits are counted with Cloudflare Web Analytics: a small script from Cloudflare reports which page was opened, how fast it loaded, and the country and kind of browser it came from. It sets no cookies, keeps no address that identifies you, and doesn’t follow you to other sites.

If you have a Pro account

• Email address, to sign you in. Sign-in emails are sent through Cloudflare Email Service, from signin@hindcastweather.com.
• Bot check: the sign-in form uses Cloudflare Turnstile, which checks the request is from a person before any email is sent. It runs only on the sign-in page.
• Sign-in sessions, stored as hashed tokens in an HttpOnly cookie and our database.
• Saved places, stored as 11 km areas, never exact locations.
• Trips: each stop’s 11 km area, the place name you picked and its dates, never an address. An itinerary shows when you’re away, so trips are private unless you make a share link: anyone with that link sees the stops, dates and forecasts (nothing about you), and turning sharing off ends the link. Trips are deleted 30 days after their last day.
• Billing: Paddle.com is our merchant of record and processes your payment details under its own privacy policy. We receive your Paddle customer ID and subscription status, not your card details. Paddle’s checkout script loads only when you start a purchase.

Your rights

You can ask for a copy of your data, or for your account and data to be deleted, by emailing support@pablin.me from your account address. Depending on where you live (for example under the GDPR in the EU and UK, or in California), you may also have the right to correct your data, object to how it’s used, or complain to your data protection authority.

Retention

Sign-in links expire after 15 minutes and sessions after 30 days. Per-area forecast scores are kept for as long as Hindcast runs. Trips are deleted 30 days after their last day. Account data is deleted when you ask us to.