Privacy

Last updated 13 September 2026.

This is written from what the software actually stores, rather than from a template. If something here turns out not to match what the app does, the app is wrong and will be fixed.

What is kept about you

• Your email address — it is how you sign in, and where notifications go when a browser is not set up for them.
• Your name, if you gave one. Only ever shown back to you.
• How you sign in. A password is stored only as an argon2 hash and cannot be read back. A passkey is stored as its public half, which is useless to anybody who steals it. Signing in with Google stores Google's permanent identifier for you, never a Google password.
• Your timezone and quiet hours, so nothing arrives at 3am.
• The places you watch — a name, and the coordinates. This is the most personal thing here: it is usually where you live.
• What you call a perfect day — your temperature, dew point, wind, rain and cloud limits.
• Which days matched, and when you were told.
• Your devices, if you turn notifications on: the address the push service gave us, and a note of the browser, so you can recognise it.
• Your sign-ins — when, and from what kind of browser, so you can sign out a device you no longer have.

What is never kept

• Card details. Payment happens on Stripe's own pages; this server sees a customer reference and nothing else.
• Your location as you move. Only the fixed places you typed in.
• Anything at all about what you do on other sites. There is no analytics script, no advertising pixel, and no third-party tracker on any page.

Who else is involved

• Open-Meteo gets the coordinates of the places you watch, so it can return a forecast for them. Nothing identifying goes with it. Coordinates are rounded first, so several people watching the same town are one request.
• Resend sends the email, and therefore handles your address.
• Stripe handles payment, if you subscribe.
• Neon hosts the database.
• Cloudflare carries the traffic between your browser and the app.
• Your browser's push service — Google, Apple or Mozilla, depending on the browser — relays notifications. The contents are encrypted, so the push service cannot read them.

Nothing is sold

Your data is not sold, rented, or handed to advertisers. The subscription is the entire business model; there is nothing else being made from you.

Getting it back, or getting rid of it

Write to [email protected] and ask for a copy of what is held about you, or for the account to be deleted. Deleting removes the account, the places, the matches, the devices and the sessions. Records Stripe must keep for its own accounting stay with Stripe.

Where it runs

Perfect Day is a small operation, not a company with a data centre. The application currently runs on a machine in Atlanta, Georgia, and the database is hosted in Ohio. If that changes materially, this page changes with it.