Privacy notice
Visit counts, and what they leave out
Climate Norms counts its traffic with Cloudflare Web Analytics. When a page loads, a short script from Cloudflare reports that page view back to Cloudflare, and what reaches us is only the totals: how many views each page got, and roughly which countries and referring sites they came from. The script sets no cookie, hands you no ID that follows you onto other websites, and gives us nothing that singles out one reader. The basis is legitimate interest under GDPR Article 6(1)(f) — seeing which city pages are worth keeping up. Blocking cloudflareinsights.com in your browser stops the count and breaks nothing on the page.
Other than that script, fonts and stylesheets come from climatenorms.com's own server, there is no ad pixel, and our own code never writes to local storage, a session store or IndexedDB.
What Cloudflare sees
Pages are delivered through Cloudflare rather than a server we run ourselves. Like any host, it necessarily sees the visiting IP address, the path requested, the time and a user-agent string for every request — that is how HTTP works, not something this site chooses to collect. We rely on legitimate interest under GDPR Article 6(1)(f) for this: a site cannot be delivered without it. Nobody here asks Cloudflare for per-visitor logs or builds profiles from them; how long Cloudflare itself retains that routing data is set out in its own policy.
If you write to us
Writing to hello@climatenorms.com hands us your address and whatever you put in the message. That is used only to reply or to fix a number you flagged; once the matter is closed we clear the thread, unless you'd rather we kept it on file. This, too, rests on legitimate interest — answering the person who wrote in. Nothing from that inbox is sold or handed to a third party for marketing.
Outbound links
Where a page links to the National Weather Service or NOAA, the link goes to the page as published, with no tracking parameters added on our end; each of those sites answers for its own data practices once you land there.
Your rights under GDPR
If you're somewhere the GDPR, the UK GDPR or an equivalent law reaches, you can ask to see the personal data on file, have it corrected or removed, limit or object to how it's used, and get a portable copy of it. Put that in writing to the email above and we'll get back to you within four weeks. Beyond that, your own country's data-protection regulator will take a complaint too, whether or not you've written to us first.
If anything beyond the visit totals above is ever collected, it will be named and explained on this page before it starts.