Privacy Policy

Controller

The controller responsible for this website and the Climetry services is:

Wadim Okley, operating as Climetry

Mittelzell 6, 73575 Leinzell, Germany

Email: contact@getclimetry.com

Purpose of the website

Climetry provides climate exposure intelligence for products, infrastructure and industrial assets. The website lets visitors read methodology and demo content, use free engineering tools, create an account, request location analyses and buy plans or credits for paid analyses and exports.

Hosting and server logs

The website frontend is hosted on Vercel. Backend services run on Render. Delivering and securing the service involves processing technical access data such as IP address, request time, requested URL, browser information, status codes and diagnostic logs. These technical logs are separate from optional website analytics.

Legal basis: Art. 6(1)(f) GDPR, legitimate interest in secure, reliable website operation.

Location analysis and stored results

When you analyze a location, Climetry processes the submitted coordinates, selected parameters and generated climate metrics. For signed-in users, Climetry stores analysis results, purchased points, saved solar setups and the history of requested exports with the account, so that purchased results can be opened again. Coordinates describe a place; depending on context, for example a private address, they can still relate to a person.

Legal basis: Art. 6(1)(b) GDPR when requested as part of a service or pre-contractual interaction; otherwise Art. 6(1)(f) GDPR for demo functionality and product improvement.

Free calculator and humidity API

The relative humidity and dew point calculator computes the values you enter in your browser. Its calculation code does not send these values to Climetry. Loading the page still involves the ordinary website requests described in this policy.

If you open the "This result as JSON" link or call the public humidity API, the values are part of the request URL and are sent to the server. Such requests can appear in technical access logs and response caches, and the URL can remain in your browser history. API responses allow browsers to cache them for one hour and shared caches for up to one day; this is not a statement about how long logs are kept. Do not put names, identifiers or other personal information into API parameters.

Maps

Pages with maps load map tiles directly from Esri's ArcGIS Online services (server.arcgisonline.com and services.arcgisonline.com). When your browser loads these tiles, Esri receives technical request data, including your IP address and the tile URLs, which show which map area is displayed. Your analysis results are not sent to Esri. Esri's privacy statement: https://www.esri.com/en-us/privacy/privacy-statements/privacy-statement

Accounts and authentication

Creating a Climetry account and signing in is handled by Clerk (Clerk, Inc.). Clerk processes your email address and authentication data, such as session tokens, sign-in times and device or browser information used for security. Climetry does not receive your password. Clerk describes its role for its customers' end-user data as that of a processor or service provider.

Climetry stores your Clerk user ID and email address in its own database and links them to your credits, purchases and saved results. If you are invited to a team, the invited email address and the team membership are stored as well.

Signing in uses session cookies and related authentication mechanisms to maintain access to your account. Authentication is separate from optional website analytics and is not controlled by the analytics choice.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract you enter into by creating an account).

Payments

Plans and credit packs are bought on a checkout page hosted by Stripe. Climetry's checkout uses Stripe Managed Payments: Sold through Link, LLC acts as merchant of record on Climetry's behalf ("Sold through Link"), while Climetry remains the seller. Link processes the payment, collects sales tax or VAT where it is required to, handles transaction support and sends receipts and invoices. According to Link's terms, Link and its affiliates may also use order data for fraud prevention, security and product improvement. Payment details such as card numbers are entered on Stripe's page; Climetry does not receive full card details.

Stripe sends Climetry notifications about each purchase, for example the Stripe customer ID, the purchased plan or credit pack, amounts and payment status, together with customer details contained in these notifications, such as email address, name or billing address where provided at checkout. Climetry stores these notifications to assign credits and subscriptions and to keep a record of purchases, refunds and disputes.

Stripe and Link process payment data under their own privacy policies: https://stripe.com/privacy and https://link.com/privacy

Legal basis: Art. 6(1)(b) GDPR (performance of the purchase contract).

Object storage and export files

Climetry uses Cloudflare R2 to store climate-data files and generated export files. An export file contains the selected location, analysis settings and model results. Export files are stored without your name or email address; the link between your account and an export is kept in Climetry's database as part of your request history.

Transfers to the United States

The service providers named in this policy, Vercel, Render, Clerk, Cloudflare, Stripe and Link, and Esri, are companies based in the United States or may process data there. Personal data described in the relevant sections can therefore be transferred to the United States.

For transfers to organisations certified under the EU-U.S. Data Privacy Framework, the European Commission has adopted an adequacy decision. Each of these providers states in its published privacy or data-processing terms that it participates in this framework; several also refer to standard contractual clauses. You can ask contact@getclimetry.com for information about the safeguards that apply to a specific provider.

Cookies and analytics

Essential service functions include authentication and browser storage used to reconnect to requested exports and, in the account area, to remember a comparison selection. Optional Vercel Web Analytics is loaded only after you allow analytics. Rejecting analytics does not prevent you from using the service. The legal basis for this optional analytics processing is your consent under Art. 6(1)(a) GDPR.

According to Vercel, Web Analytics uses no analytics cookies and uses a request-derived visitor hash. Analytics can process page URLs, referrers, timestamps, coarse location and browser/device information. The integration removes query parameters and URL fragments from page-view URLs and excludes account, team, API and checkout-success paths. Technical hosting logs and authentication are separate from analytics.

Your accepted or rejected choice is stored in this browser's local storage under climetry.privacy.v1 for up to 180 days. This record remembers your requested privacy preference; it is not an analytics identifier. You can change your choice at any time through Privacy settings in the site menu or below. Withdrawal does not affect processing already carried out. Disabling already loaded analytics reloads the page to stop its running script; save unfinished work first. If preference storage is unavailable, optional analytics remains blocked rather than treating a failed save as consent.

Microsoft Clarity is optional behavior analytics, enabled only after a separate, unselected opt-in in Privacy settings. Allowing Vercel Analytics does not authorize Clarity. Legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Its preference is stored under climetry.clarity.v2 for up to 180 days; earlier public-recording preferences are not reused for this broader purpose. Refusing or withdrawing consent does not restrict analyses or downloads.

Clarity records masked interactions on selected public pages (home, pricing and methodology), allowing heatmaps, scrolling and click-frustration analysis. Private analysis maps, coordinates, account pages, downloaded content and payment-provider pages are not recorded. A separate isolated event channel reports fixed names for viewing an analysis, receiving chart data, changing chart view, map layer or panel width, handing a completed download to the browser, and successfully starting checkout. It sends no filenames, coordinates, account identifiers, authentication tokens or checkout URLs. A download event does not prove that a file was saved, and a checkout-start event does not prove payment.

Clarity processes technical connection data including IP address, browser/device information, timestamps, permitted page interactions and pseudonymous analytics identifiers. The first-party cookies _clck (up to one year) and _clsk (up to one day) connect visits and events; these identifiers are not anonymous. Advertising storage is denied, Copilot is disabled and strict masking is configured. Masking does not remove technical connection data. Withdrawal stops further collection and removes these first-party cookies; it cannot undo information already transmitted.

Microsoft Clarity provider information

Microsoft acts as an independent controller for Clarity. Microsoft's documentation identifies Microsoft Ireland Operations Limited for EU customers and transfers to Microsoft Corporation in the United States under Standard Contractual Clauses. Processing is not restricted to the EU. These are Microsoft's published statements, not a claim that Climetry has executed a separate transfer agreement.

Microsoft states that ordinary playback data is retained for 30 days, click and heatmap data for nine months, and labeled or favorited sessions for nine months; selected recordings may also be retained longer under its recording settings. These provider periods are distinct from Climetry's own account and analysis retention. Microsoft does not offer per-user deletion in the Clarity dashboard; privacy requests can be directed to Climetry and Microsoft. See the linked Microsoft privacy statement, Clarity terms and provider documentation below.

Data retention

Climetry keeps account data, saved analyses, export history and purchase records for as long as they are needed to provide your account and the access you purchased. Records relating to purchases are kept for as long as statutory retention obligations require. Fixed periods for each of these categories have not been set. Technical logs are kept by the hosting providers under their own settings.

You can ask at any time which data is held about you and request its erasure; see the contact below. Data that Climetry must keep by law is then restricted to that purpose instead of being deleted.

Your privacy preference is honoured for up to 180 days, as described above. According to Vercel, the analytics visitor session is discarded after 24 hours.

Your rights

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure where legally applicable
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time with effect for the future
• Right to lodge a complaint with a competent data protection authority

Contact for privacy requests

For privacy requests, contact: contact@getclimetry.com