Privacy policy
FirstDrop has to know where you are in order to warn you about the weather there. That is personal data, so the short version is this: we collect as little as possible, we never sell it, and your location is never shared with advertisers.
Data controller
Allan Noer, an individual, Denmark
Email: allan@noer.biz
FirstDrop is run by one person, not a company, so there is no company registration number. If you need a postal address, for a formal request under the GDPR for instance, write to us and you will be given one.
There is no account
You never sign up, and we never ask for your name, email address or phone number. On first launch the app generates a random device ID on your phone. It is the only thing linking your saved places to your device, and it cannot be used to identify you as a person.
What we process
| Data | Why | Legal basis |
|---|---|---|
| Device ID Random identifier generated on your phone |
Link your saved places and settings to your device | Necessary to provide the service, Art. 6(1)(b) |
| Saved places Name and coordinates |
Watch the radar at exactly those spots and alert you | Necessary to provide the service, Art. 6(1)(b) |
| Your current location Only if you turn “Follow me” on |
Alert you where you are right now, even when the app is closed | Consent, Art. 6(1)(a). You switch it on and off yourself |
| Push token Plus platform (iOS/Android) |
Deliver the alert to your phone | Necessary to provide the service, Art. 6(1)(b) |
| Language and time zone | Alerts in your language and in your local time (quiet hours, commutes, frost tonight) | Necessary to provide the service, Art. 6(1)(b) |
| Personal alerts Which ones you turned on, and your thresholds (e.g. gusts over 15 m/s) |
Send exactly the alerts you chose | Necessary to provide the service, Art. 6(1)(b) |
| Commutes Days, departure time, trip length and which saved place the trip starts from |
Alert you half an hour before a wet trip | Necessary to provide the service, Art. 6(1)(b) |
| Rain at your saved places How much the radar measured every five minutes, where it rained |
Show how much rain has fallen there | Necessary to provide the service, Art. 6(1)(b) |
| Sent alerts Which alert went to which place, and when |
Avoid sending the same alert twice | Necessary to provide the service, Art. 6(1)(b) |
| Quiet hours Start and end time |
Hold back rain alerts overnight | Necessary to provide the service, Art. 6(1)(b) |
| Subscription status Whether Premium is active, and when it runs out |
Unlock what you paid for, and stop when the subscription ends | Necessary to provide the service, Art. 6(1)(b) |
| Error reports Error message, stack trace, app version, platform, device ID |
Find and fix crashes | Legitimate interest, Art. 6(1)(f) |
| Server logs Shortened IP address, time, the address requested (without coordinates), response code, app or browser |
Keep the service running, and notice abuse of it | Legitimate interest, Art. 6(1)(f) |
| Website statistics Only on firstdrop.dk, and only if you allow it. Pages viewed, approximate location, browser and device type, a random ID in a cookie |
See how the website is used, so we can improve it | Consent, Art. 6(1)(a). You give or withdraw it on the website |
We do not process special categories of personal data, and we do not build profiles on you.
Advertising
FirstDrop shows one kind of ad: a short video you choose to watch in order to unlock a paid feature for a while. There are no banners, no interruptive ads, and no ad on launch. Subscribers see none at all.
Ads are served by Google AdMob. We request non-personalised ads only. That means Google does not use a profile about you to pick the ad, and your location is never sent to advertisers. Google receives the technical information needed to serve and measure the ad. See Google's privacy terms.
In the EU, EEA, UK and Switzerland we ask for consent first through Google's certified consent management platform (UMP), and the ads SDK is not initialised until you have answered. You can change or withdraw your consent at any time in the app under Settings → Ad privacy choices.
We do not ask for App Tracking Transparency permission, because we do not track you across apps.
The consent form asks about more than we use. Google's consent form follows an industry standard (IAB TCF) and therefore mentions personalised advertising and precise geolocation, among other things. That is Google's standard wording, not a description of what FirstDrop does.
Whatever you answer, the app always requests non-personalised ads. We have also cut the list of ad partners to one, Google, so no other ad network receives data about you.
Subscriptions and payments
We never see your payment details. The money goes to Apple or Google, and your card, address and billing information stay with them. We are not told your name, your card number, or what you were charged.
Subscriptions are managed for us by RevenueCat, which tells our server whether a device is entitled to Premium. It receives your device identifier and the purchase data the app store sends it: which product, when it started, and when it expires. Our server keeps only the expiry date, so the app can unlock what you paid for and close it again when the subscription ends. See RevenueCat's privacy policy.
Because there is no account, a subscription follows the install. Restoring it on a new phone goes through your Apple or Google account, not through us.
Server logs
Our server keeps a short technical log of the requests it answers, so that we can keep the service running and notice if someone abuses it. Each entry holds the time, the address requested, the response code, how long it took, and the kind of app or browser that asked.
Two things are deliberately left out. Your IP address is shortened before it is
written. We store only the first three parts of an IPv4 address (or the first
48 bits of an IPv6 one), which is enough to tell one caller from another but not enough to
identify you. And the coordinates you look up are removed: a request for the
weather at a place is recorded as /conditions?lat=REDACTED&lng=REDACTED,
never with the real numbers. Device identifiers are stripped the same way.
These logs are kept for 14 days and then deleted automatically. They are not used to build a profile of you, are never used for advertising, and are not shared with anyone. The legal basis is our legitimate interest in operating and securing the service (GDPR article 6(1)(f)).
Statistics on this website
This section is about the website, firstdrop.dk. The app does not use Google Analytics, and nothing in it has changed.
If you allow it, the website uses Google Analytics 4 to give us anonymous statistics about how the site is used: which pages are visited, where visitors come from, and which browsers and devices they use. Nothing from Google is loaded until you press Allow statistics in the banner. If you choose Necessary only, or ignore the banner, Google Analytics is never loaded and no cookies are set.
- Legal basis: your consent, GDPR article 6(1)(a), and the Danish cookie rules, which require consent before anything that is not strictly necessary is stored on your device.
- Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, processes the data on our behalf. Data may be transferred to Google LLC in the United States, which is certified under the EU-US Data Privacy Framework, the European Commission's adequacy decision for the US.
- IP addresses: Google Analytics 4 does not log or store IP addresses. Google uses the address briefly to work out the country and city, and then discards it.
- No advertising: ad storage is always switched off, Google signals and ad personalisation are switched off, and the property is not linked to any advertising account. The statistics are not used to build a profile of you.
- Cookies:
_gatells one browser from another with a random ID, and_ga_DK79TRJW9Hkeeps track of the current visit. Both expire after about 2 years. - Retention: the statistics are kept in Google Analytics for 14 months and then deleted.
Changing your mind: use the Cookie settings link at the bottom of every page. If you choose Necessary only there, Google Analytics is switched off straight away and its cookies are deleted. We ask again after 12 months.
Your answer, and the language you picked on the front page, are remembered in your browser's
local storage (fd-consent and fd-lang). They stay on your device
and are never sent to us or anyone else.
Who we share data with
- Apple and Google: their push services (APNs and FCM, via Expo's push service) deliver the notification to your phone.
- Google AdMob: only when you choose to watch an ad, as described above.
- Google Analytics: statistics about the website, only if you allow it there, as described above.
- RevenueCat: checks whether your device has an active subscription, as described above.
- DMI, MET Norway, SMHI and the Finnish Meteorological Institute: our server looks up the weather at your places' coordinates with the national weather services of Denmark, Norway, Sweden and Finland.
- OpenFreeMap and OpenStreetMap: provide the map tiles the app draws the radar on top of.
- Cloudflare: sits in front of our API and passes the app's requests through to our server, which is how the connection is encrypted and protected against attack. Cloudflare sees the request and the IP address it came from.
We do not sell your data, and we do not share it with data brokers or ad networks beyond what is described here.
Where data is stored
Data is stored in the EU. Some of the providers listed above may process data outside the EU/EEA; where they do, it is on the basis of the European Commission's standard contractual clauses or a valid adequacy decision.
How long we keep it
- Saved places are kept until you delete them in the app. Deleting a place removes it from our database.
- Device information (device ID, push token, language, time zone, quiet hours) is kept for as long as the app is installed and alerts are enabled. If you turn notifications off or uninstall the app, the push token stops working and the record is cleaned up.
- Personal alerts and commutes are kept until you turn them off or delete them in the app. A commute is also deleted when you delete the place it starts from.
- Rain at your saved places is kept for 400 days, so a year can be shown, and is deleted together with the place.
- Sent alerts are kept for 30 days.
- Forecasts for the area around saved places are kept for 120 days, so we can measure which weather model is most often right where. They are stored for a cell of about one kilometre and are not linked to you, your device or your place.
- Error reports are written to the server's operational log, not to our database. The log is rotated daily and automatically deleted after 90 days.
- Server logs (described above, with the IP shortened and coordinates removed) are deleted after 14 days.
- Website statistics in Google Analytics are deleted after 14 months. The cookies in your browser expire after about 2 years, or when you choose Necessary only.
You can have everything associated with your device deleted at any time. See below.
Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. Where you have given consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Write to allan@noer.biz. Because we do not have accounts, we need your device ID to find your data. You will find it in the app under Settings. We respond within one month.
If you are unhappy with how we handle your data you can complain to the Danish Data Protection Agency, Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark.
Children
FirstDrop is not directed at children, and we do not knowingly collect data about children under 13. If we become aware that we have, we delete it.
Changes
If we change this policy we update the date at the top. If the change is significant, we say so in the app.
FirstDrop does not replace official weather warnings from the authorities. In dangerous weather, always follow official guidance.
Home · Dansk · Terms · Support · Hilfe (DE) · Hulp (NL) · Cookie settings · Contact