Privacy

Weather outlook

Forecast requests use a shared rounded grid point (0.05 degrees) sent by our server to MET Norway. Your browser IP, account and profile are not sent to MET Norway. Results are cached and reused. Forecasts are modelled context, separate from official warnings.

Community guides and spam protection

Warnzu Brief starter questions and answers are AI-assisted editorial templates with source references, not local eyewitness reports or messages from residents. City threads store signed-in comments, reports and helpful reactions for up to 90 days; deletion and reporting controls are available. Reactions do not influence warning priority. Cloudflare Turnstile verifies contributions before acceptance; Cloudflare processes challenge data and connection information, including IP address. Reading public reports requires no challenge. Advertising is currently disabled. Future advertising is restricted to editorial learning articles and requires configured publisher approval and consent controls; warnings, incident threads and account pages remain free of ads.

Feed area and notification area

Feed radius, earthquake radius, magnitude and distance units can be saved in this browser independently of notifications. Existing local notification preferences are retained in a separate browser record. Saving the feed does not update an account profile or retarget notifications. Choosing Use these settings for notifications explicitly updates the browser notification area and, with a signed-in saved account profile, its selected location, radii, magnitude and units. It preserves topic/severity choices, delivery consent and registered devices. It does not grant notification permission or enable a new delivery channel.

Invitations and account access

Complimentary invitation records contain a hashed code, private owner label, issuing account, redemption account and dates. Raw codes are shown only when created and are not stored. Records are removed during later invitation creation once all redemption, membership and revocation dates are more than 90 days old. A hash of the Google-verified email is retained with short-lived login sessions to restrict invitation management to the owner; it is not published. Deleting a cloud profile does not erase membership or invitation records.

Location and your local profile

Warnzu is operated by Perkwiz Inc. Reading reports needs no account. Optional cloud profiles are described below. If you choose “Save my profile on this device,” your display name, selected location, language, categories and alert preferences are stored in this browser’s local storage. Without that choice, the profile lasts for this page session. Use Profile & settings → Profile → Delete my profile to remove it, or clear Warnzu site data in your browser.

When no profile is saved, our Cloudflare-hosted service may estimate a city or region from ordinary connection metadata. This approximate area is displayed so you can correct it. It is not automatically saved as a profile. No device-location permission is requested without your pressing “Use my location.”

Selected latitude and longitude are rounded to three decimal places, approximately 100 metres, before being stored or used for reports. Warnzu receives the selected coordinates and country to retrieve relevant reports. For US locations, the selected coordinates are sent to the US National Weather Service to find point-specific alerts. Other connected global feeds are retrieved independently of your location and filtered by Warnzu. City search runs against a bundled GeoNames catalog.

Recorded incident log

The Recorded view keeps up to 500 source reports from the preceding 30 days, combining this browser’s records and the available shared source history. Without a saved profile the log stays in memory for this session. Saving your profile also stores this log in browser local storage for the selected location and radius. Changing the location or radius starts a new log. Deleting the profile removes its log. It is not a complete archive, does not synchronize between devices, and historical entries do not establish current warnings.

Maps, sharing and comments

Interactive maps load from OpenStreetMap only after you open a map. OpenStreetMap receives ordinary connection data and the incident coordinates, or your selected coordinates when you open the Selected Place map. Share links identify a public incident; they do not include your selected location or profile. Public incident snapshots are stored on Cloudflare, limited to 20,000 records, and records older than 90 days are removed during subsequent feed refreshes. Shared pages may therefore become unavailable. Map markers are source-reported points, not impact boundaries.

Google sign-in for comments checks a verified Gmail address and basic identity; it does not request inbox access or synchronize your local profile. We retain a hashed account identifier, display name, comments and posting timestamps, and short-lived session and challenge records. Email addresses and raw IP addresses are not stored in the comment database. Daily IP hashes support abuse limits. The comment session token stays in page memory and expires within one hour. Comments and reports older than 90 days are removed during subsequent feed refreshes. Your posted name and text are public. Deleting a comment removes its text; limited anti-abuse metadata remains until retention cleanup. Deleting the local profile does not delete public comments: use Delete on each of your comments while signed in. Three distinct signed-in reports hide a comment pending review. Google, OpenStreetMap and sharing destinations have their own privacy terms.

Hosting and storage

Cloudflare handles requests and ordinary network metadata such as IP address, browser information, requested URL and approximate geography. A report request includes selected coordinates in its API URL. Infrastructure logs may therefore contain request metadata; Warnzu does not promise anonymous network access. Local profiles remain in the browser. A separate cloud profile is stored only when you sign in and explicitly choose to upload it; we do not maintain a movement-history database. Aggregated public source responses may be cached with their original check times.

A session-only flag remembers that you opened the profile guide so it does not repeat in the same tab. The service worker stores only an offline message and app icon. It does not cache API reports as current information. The site uses no advertising trackers or advertising cookies. Local preferences are not sent to an analytics or advertising service.

Notifications and external sources

Browser notifications require separate browser permission and a chosen location. Free feed alerts run while the page stays open. Optional device registration on Account & alerts creates a server push subscription only after you explicitly enable it. Basic background delivery requires device activation and a successfully received test. Disable notifications using the dashboard or your browser’s site settings. Permission belongs to the browser and is not removed by deleting your profile.

External source links open the original provider. Those websites have their own privacy terms. The specialized Panama dashboard and its Gmail comment sign-in are separate from this local Warnzu profile. Payments and paid alert channels are not active in this release.

Pronóstico del tiempo

El servidor envía a MET Norway un punto redondeado de cuadrícula compartida (0,05 grados). No envía tu IP de navegador, cuenta ni perfil. Los resultados se guardan y reutilizan. Son contexto de modelo, separado de los avisos oficiales.

Guías comunitarias y protección contra spam

Las preguntas y respuestas iniciales de Warnzu Brief son plantillas editoriales asistidas por IA con referencias a fuentes, no reportes de testigos ni mensajes de residentes. Los hilos de ciudad guardan comentarios, reportes y reacciones «útil» de usuarios con sesión iniciada hasta 90 días; hay controles para borrar y denunciar. Las reacciones no influyen en la prioridad de los avisos. Cloudflare Turnstile verifica las contribuciones antes de aceptarlas; Cloudflare procesa los datos del desafío y de conexión, incluida la dirección IP. Leer reportes públicos no requiere ningún desafío. La publicidad está desactivada por ahora. Cualquier publicidad futura se limitará a los artículos educativos y requerirá la aprobación del editor y controles de consentimiento configurados; los avisos, los hilos de incidentes y las páginas de cuenta seguirán sin anuncios.

Zona del feed y zona de notificaciones

El radio del feed, el radio de sismos, la magnitud y las unidades de distancia pueden guardarse en este navegador de forma independiente de las notificaciones. Las preferencias locales de notificación existentes se mantienen en un registro aparte del navegador. Guardar el feed no actualiza el perfil de la cuenta ni cambia el objetivo de las notificaciones. Elegir «Usar estos ajustes para las notificaciones» actualiza de forma explícita la zona de notificaciones del navegador y, si tienes una sesión con perfil guardado en la nube, su ubicación, radios, magnitud y unidades. Conserva los temas y niveles de gravedad elegidos, el consentimiento de entrega y los dispositivos registrados. No concede permiso de notificaciones ni activa un nuevo canal de entrega.

Invitaciones y acceso a la cuenta

Los registros de invitaciones de cortesía contienen un código con hash, una etiqueta privada del propietario, la cuenta emisora, la cuenta que la canjeó y las fechas. Los códigos en claro solo se muestran al crearlos y no se guardan. Los registros se eliminan al crear invitaciones posteriores, una vez que todas las fechas de canje, membresía y revocación tienen más de 90 días. Se conserva un hash del correo verificado por Google junto con sesiones de inicio breves para limitar la gestión de invitaciones al propietario; no se publica. Borrar un perfil en la nube no elimina los registros de membresía ni de invitación.

Registro de incidentes

Registro conserva hasta 500 reportes de los últimos 30 días, combinando registros de este navegador y el historial compartido disponible. Sin perfil guardado, se mantienen en memoria durante la sesión. Guardar el perfil conserva el registro en el almacenamiento local del navegador para la ubicación y el radio elegidos. Cambiar la ubicación o el radio inicia otro registro; borrar el perfil elimina su registro. No es un archivo completo, no se sincroniza entre dispositivos y las entradas históricas no establecen avisos vigentes.

Ubicación y perfil local

Warnzu es operado por Perkwiz Inc. Leer reportes no requiere cuenta. Los perfiles opcionales en la nube se describen abajo. Si eliges “Guardar mi perfil en este dispositivo”, tu nombre, ubicación, idioma, categorías y preferencias de alertas se guardan en el almacenamiento local de este navegador. Sin esa opción, el perfil dura esta sesión de página. Usa Perfil y ajustes → Perfil → Eliminar mi perfil, o borra los datos de Warnzu en el navegador.

Cuando no hay un perfil guardado, nuestro servicio en Cloudflare puede estimar una ciudad o región a partir de los datos normales de conexión. La zona aproximada se muestra para que puedas corregirla. No se guarda automáticamente como perfil. No se solicita permiso de ubicación del dispositivo hasta que pulses “Usar mi ubicación”.

La latitud y longitud elegidas se redondean a tres decimales, unos 100 metros, antes de guardarse o usarse. Warnzu recibe esas coordenadas y el país para buscar reportes. Para ubicaciones en EE. UU., las coordenadas se envían al Servicio Meteorológico Nacional para consultar alertas del punto elegido. Las demás fuentes globales se consultan sin tu ubicación y Warnzu filtra los resultados. La búsqueda de ciudades usa un catálogo GeoNames incluido en el servicio.

Mapas, enlaces y comentarios

Al abrir un mapa interactivo, OpenStreetMap recibe datos normales de conexión y las coordenadas del incidente, o las coordenadas elegidas si abres el mapa del lugar seleccionado. Los enlaces compartidos identifican un incidente público, no tu perfil ni ubicación elegida. Cloudflare guarda hasta 20.000 reportes públicos; los de más de 90 días se eliminan durante actualizaciones posteriores del feed. Un enlace antiguo puede dejar de estar disponible. Los marcadores no delimitan el impacto.

El acceso con Google verifica Gmail e identidad básica; no pide acceso al correo ni sincroniza tu perfil local. Se guardan un identificador de cuenta con hash, nombre público, comentarios, fechas y registros temporales de sesión. No se guardan correos ni IP sin procesar en la base de comentarios. Hashes diarios de IP limitan abusos. El token permanece en memoria y vence en una hora como máximo. Comentarios y reportes de más de 90 días se eliminan durante actualizaciones posteriores. El nombre y texto publicados son públicos. Eliminar un comentario borra su texto; los metadatos contra abuso permanecen hasta la limpieza. Borrar el perfil local no borra comentarios públicos: usa Eliminar en cada comentario con sesión iniciada. Tres reportes de cuentas distintas ocultan el comentario para revisión. Google, OpenStreetMap y los destinos de compartir tienen sus propias condiciones.

Alojamiento y almacenamiento

Cloudflare procesa solicitudes y datos normales de red, como dirección IP, navegador, URL solicitada y geografía aproximada. La solicitud de reportes incluye las coordenadas en la URL de la API. Los registros de infraestructura pueden contener estos datos; Warnzu no promete acceso de red anónimo. El perfil local permanece en el navegador. Solo se guarda un perfil separado en la nube si inicias sesión y eliges enviarlo explícitamente; no mantenemos un historial de movimientos. Las respuestas públicas agregadas pueden guardarse temporalmente con la hora original de consulta.

Una marca de sesión recuerda que abriste la guía del perfil para no repetirla en la misma pestaña. El service worker guarda solo un mensaje sin conexión y el icono. No presenta reportes guardados como información actual. El sitio no usa rastreadores publicitarios ni cookies de publicidad. Las preferencias locales no se envían a servicios publicitarios o analíticos.

Notificaciones y fuentes externas

Las notificaciones requieren permiso separado del navegador y una ubicación elegida. Las alertas gratuitas funcionan con la página abierta. Cuenta y alertas permite registrar un dispositivo push solo al activarlo explícitamente. La entrega básica en segundo plano requiere activar el dispositivo y recibir una prueba. Puedes desactivarlas en el panel o en la configuración del navegador. El permiso pertenece al navegador y no desaparece al borrar el perfil.

Los enlaces externos abren la fuente original, con sus propias condiciones de privacidad. El panel especializado de Panamá y sus comentarios con Gmail son independientes del perfil local de Warnzu. Los pagos y canales de alertas de pago no están activos.

Optional measurement

Only with your explicit permission, Warnzu counts actions by campaign, content, channel and language. No name, city, coordinates, email, visitor ID, raw URL or personal history is included. Your consent choice and last measured visit date stay in this browser. A temporary daily IP hash is used only for abuse limiting. Anonymous aggregate counts are public, retained for up to 90 days, and cannot be linked back to you for deletion. Use Optional measurement in the footer of the dashboard or learning pages to disable future collection. Free use does not require measurement. Purchases are not tracked while billing is disabled.

Solo con tu permiso explícito, Warnzu cuenta acciones por campaña, contenido, canal e idioma. No incluye nombre, ciudad, coordenadas, correo, identificador de visitante, URL completa ni historial personal. Tu elección y la última fecha de visita medida quedan en este navegador. Solo se usa un hash temporal diario de IP para limitar abusos. Los totales anónimos son públicos, se conservan hasta 90 días y no pueden vincularse contigo para borrarlos. Usa Medición opcional en el pie del panel o de las páginas educativas para desactivar la recogida futura. El uso gratuito no requiere medición. No se registran compras mientras los pagos están desactivados.

Optional cloud account

Gmail sign-in creates a secure seven-day account session. Your profile is uploaded only when you explicitly press Save in the account page. It includes the display name, chosen coordinates, radius, topics and alert preferences shown there. Delete cloud profile and devices to remove those saved settings and push subscriptions. Billing records, when applicable, are managed separately for invoices and cancellation.

Al iniciar sesión con Gmail se crea una sesión segura de siete días. El perfil solo se envía cuando pulsas Guardar explícitamente. Incluye nombre, coordenadas elegidas, radio, temas y preferencias. Puedes eliminar el perfil y los dispositivos desde la cuenta. La facturación se administra por separado.

Push and support

Registered browser push endpoints and encryption keys are stored privately to deliver requested notifications. The browser push service receives encrypted messages and connection metadata. Delivery logs are retained for up to 90 days and distinguish service acceptance from confirmed receipt. Support forms privately store your reply address and message for up to 90 days and forward the message through Cloudflare to the operator inbox. Do not submit passwords or payment-card details.

Los destinos y claves push se guardan en privado. El servicio push recibe mensajes cifrados y datos de conexión. Los registros de entrega se conservan hasta 90 días. El formulario de soporte guarda correo y mensaje en privado hasta 90 días y los reenvía por Cloudflare al operador. No envíes contraseñas ni tarjetas.

Shared collection and your Alerts inbox

Public source revisions are retained for up to 30 days, with a 20,000-record cap per source or NWS query point. NWS query caches retain your rounded selected point to retrieve matching public notices; they are not a movement history. Your optional cloud inbox stores up to 500 matching entries, read states and muted incidents for 30 days. Deleting your cloud profile removes that inbox. A temporary random push receipt token expires after ten minutes. A device receipt confirms that its service worker displayed the notification, not that a person read it. Tested-device status remains until the device is removed.

Las revisiones públicas se conservan hasta 30 días, con máximo 20.000 por fuente o punto NWS. La caché NWS conserva el punto redondeado elegido para consultar avisos; no es un historial de movimientos. La bandeja opcional en la nube guarda hasta 500 entradas, estados de lectura e incidentes silenciados por 30 días. Borrar el perfil de nube elimina la bandeja. Los tokens temporales de recepción push vencen tras diez minutos. La recepción confirma que el service worker mostró la notificación, no que una persona la leyera.

Language preference

Warnzu uses a supported browser language, with English as the fallback. Choosing a language saves a preference in local storage and a first-party cookie for one year. If signed in with a saved cloud profile, the preference also sets its notification language.

Optional product analytics

A separate opt-in allows a random browser identifier to measure visits, activation and returning use for 90 days. The server stores only a hash of that identifier, event type, allowlisted channel, language and timestamp. No selected place, coordinates, name, email, text, recording or full URL is collected. Reports are owner-only. Disable and delete through Optional analytics in the footer; this deletes records associated with this browser identifier. Refusing does not restrict free features. Operational account and delivery records are separate and necessary to provide the service.

Account administration

The owner can access account display names, membership status, saved city names, device setup and delivery records to operate and support the service. Private support notes and tags may be maintained; no payment-card details are stored in this area. Last sign-in is recorded from this release onward. Clearing your cloud profile also clears its private support notes and tags. Support change history retains action names and timestamps for 90 days, without copies of note contents. Anonymous analytics identifiers are not linked to customer records.

WarnZu and WarnZu Parent native apps (version 1.0)

This section covers the WarnZu (caregiver) and WarnZu Parent family check-in apps operated by Perkwiz Inc., separately from the weather website described above. The apps keep account and family information in Supabase (authentication, database and server functions): your account identifier, email address and display name; your family circle, your role in it and the relationship label you choose; invitation codes; check-in schedules, reminder settings and snoozes; the time and status of each check-in (OK or need help); and, for a connected parent, the time the app last reported in. Members of a circle can see what is shared within it, including check-ins and saved home addresses. Check-ins and app heartbeats record time and status only, never your location.

Sign-in uses Supabase authentication. Email sign-up and sign-in use your email address and a password; confirmation and password-reset messages are sent by Supabase using Amazon Simple Email Service (Amazon Web Services) as the mail provider. Where offered, Sign in with Apple or Google provides an identity token and the name and email you choose to share; WarnZu never receives your Apple or Google password. Your sign-in session and app preferences stay on your device.

Home address and hazard lookups: the home address you type is sent once to the U.S. Census Bureau geocoder to obtain coordinates, which are rounded to about 100 metres and stored with the address in your family's home settings. Even rounded, these coordinates can identify a specific home, and members of your circle can see the address. The National Weather Service and the U.S. Geological Survey receive those coordinates, with ordinary connection data such as your IP address, whenever the app checks for nearby weather alerts and earthquakes, including the alert preview during setup. The apps never request or use your device's location: there is no GPS permission, no background location and no location history. Add only an address you are authorized to share with your family.

Notifications need your device's permission. The app stores an Expo push token for each signed-in device, with its platform and the time it was last seen; Expo's push service, Apple Push Notification service and Firebase Cloud Messaging process those tokens and the notification text to deliver reminders, family alerts and "I need help" messages. A missed check-in first reminds the parent and, after a grace period, notifies the family by push. Daily check-in and trial reminders can also be scheduled locally on the device. You can change the permission in your device settings. This release makes no automatic phone calls and sends no SMS, and the apps do not ask for a phone number.

Subscriptions are billed by Apple or Google; we never receive your payment-card details. RevenueCat processes your app account identifier, purchase history, subscription status and entitlements to unlock and restore purchases, and reports subscription status to our server, which stores whether your family plan is active and when it expires. The WarnZu Parent app is free but also initializes RevenueCat; the caregiver's subscription controls the family's paid features.

App measurement is separate from the website's optional browser analytics. Firebase Analytics (Google) receives app events such as onboarding steps, sign-in, check-ins, paywall views and purchases, together with an app-instance identifier and, when signed in, your app account identifier; Google may derive an approximate location from your IP address. This measurement cannot be switched off in version 1.0. RevenueCat may receive the Firebase app-instance identifier, device identifiers and Apple ad-attribution data to measure installs and subscriptions. On iOS, advertising identifiers and ad attribution are used only if you allow tracking in the App Tracking Transparency prompt; on Android, the advertising-ID permission is blocked. The apps include the Meta (Facebook) SDK for install and purchase attribution; it is activated only in builds configured with a Meta app ID, which the version 1.0 builds prepared on October 26, 2026 were not, and it also follows your iOS tracking choice. PostHog retention analytics is built in but switched off in every release build. The apps show no advertisements and we do not sell personal information.

Retention and deletion: account, circle, home-address, check-in and heartbeat records are kept while your account exists, and invitation codes expire after seven days. To delete your account, open Settings in the app, tap Delete my account and confirm with Delete permanently. This removes your sign-in account, profile, circle memberships, home address, check-ins, push tokens and the other records you own; a circle you created passes to another member so your family can keep using it (or is deleted if you were its only member), and content other members created stays with them. We also ask RevenueCat to delete your customer record. Deleting your account does not cancel an Apple or Google subscription: cancel it in your App Store or Google Play settings. Supabase and our other providers keep operational logs and backups for a limited time, and we keep billing records only as long as the law requires. Step-by-step instructions are at warnzu.com/delete-account and mom.warnzu.com/delete-account. For access, correction or deletion requests, write to support@warnzu.com from the email address on your account; never send passwords or sign-in tokens. The apps are for adults aged 18 or over and are not designed for children.