Your location is not our hobby.

Scope and who we are

This policy covers the Cruddy Weather page on Wiplash Labs, the Cruddy Weather browser extension, and the Cruddy Weather API. Cruddy Weather is operated by Westward Envoy Technologies LLC d/b/a Wiplash.ai (“Wiplash,” “we,” “us,” or “our”). The broader Wiplash.ai Privacy Policy also applies. If the two policies conflict about Cruddy Weather data, this product-specific policy controls.

Information we collect

Location and forecast choices

When you ask for local weather, we process latitude and longitude. The extension may also send the location label you selected, your unit system, and your Safe, Mild, Hot, or Spicy attitude setting. A manual location search sends the place text you type.

Information stored by the extension

Chrome's local extension storage keeps your selected location, units, attitude, theme, viewed settings-copy rotation, and the last valid public copy bundle. The new-tab feature reads up to eight top sites locally. It does not send those site names or addresses to Cruddy Weather.

Website and API information

Our systems necessarily receive standard network information, including an IP address, request time, browser or client details, and the requested API route. Commercial API credentials are processed to authenticate API calls. Messages you send to support are also collected.

How we collect it

We receive information when you press “Use my location,” search for a place, save extension preferences, call the API, consent to optional website analytics, or contact us. Browser geolocation is controlled by your browser or operating system. Denying permission leaves the default Austin forecast on the Labs page and does not trigger an IP-location fallback there.

How we use information

We use this information to return forecasts and alerts, preserve extension settings, authenticate commercial API calls, prevent abuse, troubleshoot failures, answer support requests, and improve the Labs website when you opt into analytics. We do not use forecast locations to infer where you live, build advertising profiles, or train AI models. Scheduled AI-assisted copy generation creates generic weather lines; it does not receive your location, forecast request, API credential, or browsing activity.

Legal bases

Where a legal basis is required, we rely on your consent for browser geolocation and optional analytics; performance of a contract to provide authenticated API services; our legitimate interests in operating, securing, and improving Cruddy Weather; and compliance with legal obligations. You can withdraw location permission in your browser and decline analytics without losing access to the default forecast.

Who receives information

We disclose only what is needed to operate the feature you request:

• NOAA's National Weather Service receives coordinates so we can retrieve the forecast and active alerts.
• OpenStreetMap's Nominatim service receives manual location-search text.
• An IP geolocation provider receives the request network address only if the extension's browser-location provider fails after an explicit current-location request. We do not use this fallback after an explicit permission denial.
• Google Analytics receives page and device usage data only after consent on the Labs website. We configure IP anonymization and disable Google signals and ad-personalization signals. Forecast coordinates are not included in Analytics events.
• Infrastructure and professional service providers may process limited data to host, secure, support, or legally advise the service.

We may also disclose information when required by law, to protect users or the service, or as part of a business transaction subject to this policy.

International transfers

Wiplash is based in the United States and Cruddy Weather v1 serves U.S. forecast locations. If you access the service from elsewhere, information may be processed in the United States or in countries where our providers operate. Where required, we use legally recognized transfer safeguards and provider terms. The correct mechanism for a particular jurisdiction should be confirmed with legal counsel.

How long information stays

• Labs location: the page does not write your chosen coordinates to its local storage or cookies. They remain in the page runtime for the request and are sent to the API.
• Extension settings: remain in Chrome's local extension storage until you change them, clear extension data, or uninstall the extension.
• Forecast and location cache: may remain temporarily in volatile API memory for performance and stale-weather fallback. It is not written to a Cruddy Weather user-profile database and disappears when that process cache is cleared or restarted.
• Analytics choice: stays in local storage and a first-party cookie for up to 180 days. We do not intentionally configure user-level Google Analytics event retention beyond 14 months.
• API credentials and support records: remain while the credential is active or as reasonably needed to provide support, secure the service, resolve disputes, and meet legal obligations.

Your rights and choices

Depending on applicable law, you may request access, correction, deletion, or a portable copy of personal information, or object to or restrict certain processing. You may use an authorized agent where the law permits. We may verify a request before completing it. We will not discriminate against you for exercising a privacy right.

You can also revoke location permission in browser settings, remove saved extension data by clearing or uninstalling the extension, decline Labs analytics, or use Global Privacy Control. Send requests with the subject “Cruddy Weather Privacy Request” to support@wiplash.ai.

Cookies and tracking

The extension contains no advertising or analytics. On the Labs website, Google Analytics does not load unless you choose “Accept analytics.” If you decline or send a Global Privacy Control signal, it stays off. We store the consent choice in local storage and a first-party cookie so we do not keep asking. Cruddy Weather does not use cross-context behavioral advertising trackers.

Security

We use safeguards designed for the sensitivity and scope of this service, including encrypted transport on the production site, scoped browser permissions, separate public and authenticated API routes, credential checks, request validation, and limited local storage. No internet service is perfectly secure. If you discover a security problem, contact support@wiplash.ai.

Children's privacy

Cruddy Weather is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us so we can investigate and delete it where required.

Contact and privacy requests

Email privacy and access requests to support@wiplash.ai. Send legal notices to legal@wiplash.ai. Please identify Cruddy Weather in the subject line. We will respond within the period required by applicable law.

Changes to this policy

We may update this policy as Cruddy Weather changes. We will change the effective date and provide a prominent product or website notice before a material change takes effect when required. Continued use after the effective date is subject to the updated policy.

Chrome Web Store Limited Use

Cruddy Weather's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. Browser history made available through the top-sites permission stays on your device and is used only to render your frequent-site shortcuts. Search text is sent only when you submit it to your configured browser search provider.

Additional disclosures

We do not sell personal information and do not share it for cross-context behavioral advertising. Third-party links and services have their own privacy terms. Weather can be delayed, incomplete, or wrong; follow official emergency instructions when safety is at stake. Cruddy Weather commentary is a Wiplash product and not an official government statement.