Privacy Policy — ShadowFinder

This Privacy Policy describes how the ShadowFinder application ("ShadowFinder", "we", "us") handles information when you use the app on the web or as an installed Progressive Web App (PWA), including distribution via the Google Play Store. We designed ShadowFinder to work with as little personal data as possible.

1. Data Controller

The operator of the app is responsible for the processing of personal data described here. For any privacy-related questions or requests, please contact us at h5.labs@hotmail.com.

2. Data We Process

ShadowFinder does not require an account and does not collect tracking, advertising, or analytics identifiers. The following data is processed only as needed to provide the core functionality:

Approximate or precise location (latitude/longitude): Requested only after you tap the location button. Used locally on your device to calculate the sun position and shadow direction. Coordinates are also transmitted to third-party APIs (see Section 4) to retrieve a place name and weather data. Your coordinates are not stored on our servers.
Device sensor data (orientation/compass): Read in the browser only after you grant motion/orientation permission, to align the on-screen compass. Sensor data stays on your device and is never transmitted.
Local app settings: Preferences such as language, selected slider mode, and similar UI state are stored in your browser's local storage on your device. They are not transmitted to us.
Technical request data: When your device loads the app or calls a third-party API, standard technical data (IP address, user agent, timestamp) is processed by the respective hosting provider / API operator for the purpose of delivering the response and securing the service.

3. Purposes and Legal Basis

We process the data above to (a) display the sun position, shadow direction and related information for your chosen location, (b) enrich the display with a place name and weather/UV information, and (c) operate and secure the app. Where the GDPR applies, the legal basis is your consent (Art. 6(1)(a) GDPR) for location and sensor access, and our legitimate interest (Art. 6(1)(f) GDPR) in providing a working, secure service for delivering the app itself.

4. Third-Party Services

To provide its features, the app communicates directly from your device with the following third-party services. These providers act as independent controllers for the request data they receive:

OpenStreetMap Nominatim (reverse geocoding to resolve coordinates into a place name) — Privacy Policy.
Open-Meteo (temperature and UV index forecast for your coordinates) — Terms & Privacy.
Hosting / CDN used to serve the app's static files (HTML, JavaScript, images, manifest, service worker).

When the app is distributed via the Google Play Store, Google may additionally process data in connection with installation, updates, and crash reporting in accordance with Google's Privacy Policy.

5. Data We Do Not Collect

No user accounts, names, email addresses or passwords.
No advertising IDs and no advertising SDKs.
No analytics or tracking SDKs.
No contacts, photos, microphone, camera, SMS, or call data.
No background collection of location or sensor data.

6. Permissions

The app may request the following permissions on your device, each only when you actively use the related feature:

Location — to compute the sun position for your current location.
Motion & orientation sensors — to align the compass with the direction your device is facing.

You can revoke these permissions at any time in your browser or operating system settings.

7. Data Retention

Settings stored in your browser's local storage remain on your device until you clear them via the browser/app settings or uninstall the app. We do not maintain server-side user profiles.

8. Children

ShadowFinder is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal data from children.

9. International Transfers

The third-party services listed in Section 4 may process requests on servers located outside your country, including outside the European Economic Area. Such transfers are governed by the respective providers' safeguards.

10. Your Rights

Subject to applicable law (including the GDPR and, where applicable, the CCPA), you have the right to access, rectify, delete, or restrict processing of your personal data, to object to processing, and to data portability. You also have the right to lodge a complaint with a supervisory authority. Because we do not hold a user account, most rights are exercised directly on your device (e.g. by clearing app data or revoking permissions).

11. Security

All network connections from the app use HTTPS. Because most data stays on your device, the primary security boundary is your own device and browser.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the effective date at the top of this page.

13. Contact

For any questions about this Privacy Policy or your data, contact us at h5.labs@hotmail.com.