1. Your Privacy Choices

BashWeather respects your right to control how your personal data is used. This page allows you to review and update the consent choices you have made for non-essential data processing activities. Your preferences are stored locally on your device and applied each time you use the app.

Some features of BashWeather require certain data to function correctly — these are described below as Essential and cannot be disabled without breaking core functionality. All other categories are optional and can be turned off at any time.

Your choices apply to data processing carried out by BashWeather (operated by Bashar Sawaqed). Third-party services integrated into BashWeather, such as Google Sign-In and advertising networks, may have their own privacy controls which are linked below where applicable.

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the right to withdraw consent at any time. If you are located in the United States (California), you have rights under the California Consumer Privacy Act (CCPA). Residents of Jordan and the wider MENA region are protected under applicable national data protection frameworks.

2. Essential Cookies & Storage

Essential cookies and local storage entries are strictly necessary for the operation of BashWeather. Without them, core features such as authentication, session management, and basic app rendering would not work. Because these are necessary for a service you have explicitly requested, they do not require your separate consent under GDPR Recital 47 and ePrivacy rules.

Essential items we use include:

• Authentication tokens: When you sign in with Google, we store a session token to keep you logged in. This expires automatically when your session ends or after 30 days of inactivity.
• User preferences: Your temperature unit choice (°C / °F), home city, and display theme are stored in localStorage so your settings persist between sessions.
• Service Worker cache: BashWeather is a Progressive Web App (PWA). The service worker caches app assets (HTML, CSS, JS, icons) so the app loads quickly and works offline. These caches do not contain personal data.
• Consent record: A record of the consent choices you make on this page is stored locally so your preferences are remembered.
• Security tokens (CSRF): Short-lived tokens are used to prevent cross-site request forgery attacks during authentication flows.

None of the essential data listed above is shared with third parties for marketing purposes.

3. Analytics & Performance

We use analytics tools to understand how users interact with BashWeather. This helps us identify bugs, improve performance, and prioritize new features. Analytics data is pseudonymous — it is tied to a device or session identifier, not directly to your name or email address.

Analytics data collected may include: pages or screens viewed, time spent in the app, device type and operating system, general geographic region (country/city level), and error or crash reports. We do not use analytics data to serve targeted advertising.

4. Advertising & Personalization

BashWeather may display advertisements to support the free tier of the service. With your consent, we and our advertising partners may use cookies and device identifiers to deliver ads that are more relevant to your interests, based on your browsing activity within the app and on other sites. Without this consent, you may still see ads, but they will be contextual (based on the weather content you are viewing) rather than personalized.

Advertising partners operating on BashWeather include Google AdSense and related Google advertising products. These partners may set their own cookies on your device, subject to their own privacy policies. You can review Google's privacy controls at myaccount.google.com.

5. Push Notifications

BashWeather can send push notifications to your device when significant weather events occur in your saved locations — such as severe weather alerts, frost warnings, or significant temperature changes. These notifications are powered by the Web Push API and your browser's notification service.

To enable push notifications, your browser will ask for your explicit permission. You can revoke this permission at any time through your browser or device settings, or by toggling the switch below. We will never use push notifications to send marketing messages unrelated to weather.

6. Location Access

BashWeather uses your device's GPS or network-based location to automatically detect your current location and display accurate local weather. Your precise location is used only in real time to fetch weather data — it is not stored on our servers, logged, or shared with third parties for purposes other than retrieving the weather for that location.

Location access requires your browser's explicit permission. You can revoke this at any time through your browser settings. Without location access, you can still use BashWeather by manually searching for cities.

7. How to Withdraw Consent

You may withdraw or modify your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. You have several options:

• This page: Toggle any non-essential category off and click "Save Preferences" below.
• Opt-Out page: Visit bashweather.app/opt-out to submit a formal opt-out request, including requests under CCPA (Do Not Sell or Share My Personal Information) and GDPR.
• Browser controls: You can clear cookies and local storage through your browser settings at any time. Note that clearing all storage will also reset your app preferences (city, units, theme).
• Device settings: For location and push notification permissions, your device or browser settings provide a direct way to revoke these permissions entirely.
• Email request: Contact us at privacy@bashweather.app to request that we update your consent record or assist you in exercising any data rights.

We will process any consent withdrawal request promptly, and in any event within 30 days for GDPR-covered requests and 45 days for CCPA-covered requests.

8. Contact

If you have any questions about how your consent is recorded or processed, or to exercise any data subject right, please contact our privacy team: