Privacy Policy

Last updated: 2026-11-11. This page describes the LazeCast service (lazecast.com).

What LazeCast is

LazeCast is a weather-based what-to-wear assistant. It looks at the forecast for your area and suggests what to wear. This policy explains what data the service handles, why, and what control you have over it.

What we collect and why

Approximate location. When you open the app, we estimate your city from your network (IP) address so we can show local weather right away. This is a rough, city-level guess — never your exact address.
Precise location (optional). If you grant your browser's geolocation permission, your device sends coordinates to our API to fetch a more accurate forecast. The coordinates used for a recommendation are stored with that entry in your recommendation history. You can use the app without this permission by choosing a city manually.
Comfort profile and preferences. How warm or cold you usually feel, your personal comfort thresholds, language and interface settings, saved locations, and notification preferences.
Children profiles (optional). If you add a child, we store an optional name, a gender and a birth date (with the precision you chose) so clothing advice can be tailored for the child. See the children's data section below.
Wardrobe (optional). Clothing items you add, including photos you upload.
Account (optional). You can sign in to keep your data across devices — the available methods and the data each one provides are listed under «Sign-in methods» below. Signing in sets one session cookie to keep you signed in. Without signing in, the app works anonymously.
Feedback. Messages you send through our Telegram feedback bot are delivered to us via Telegram so we can reply to you.
Push notifications (optional, signed-in accounts only). If you are signed in and turn on notifications, we store the push subscription your browser issues, linked to your account, together with your notification settings. Signing out turns off this device's subscription; deleting your account turns off all of them.
Technical data. A random anonymous install ID and app caches stored in your browser (localStorage), plus aggregate, privacy-safe service counters that never contain coordinates, IP addresses or personal identifiers.
Analytics (only if enabled). We may enable Google Analytics (GA4), Google Tag Manager and/or Microsoft Clarity. When enabled, these scripts collect usage statistics (pages viewed, clicks, scrolling and, for Clarity, anonymized session replays with sensitive fields masked) under Google's and Microsoft's policies. Visitors from the EEA, the UK and Switzerland are asked first: until you accept, these tools are not loaded at all, and you can change your choice at any time via «Cookie settings». When not configured, no analytics scripts run.

Sign-in methods

Google and Telegram: an account identifier and the display name, email address, username or profile-picture link the provider shares.
Email code (if enabled): your email address, which becomes your account identifier. We send the one-time code through our email delivery provider (Resend); the code itself is never stored — only a one-way check value, valid for 10 minutes.
Sign in with Apple (if enabled): a stable Apple user identifier, the email address Apple shares with us (a private relay address if you chose «Hide My Email»), and your name if you choose to share it at your first sign-in.
WeChat (if enabled): your WeChat identifier (unionid, or openid when unionid is unavailable) and, if WeChat returns them, your nickname and profile-picture link. We do not receive your phone number, contacts or WeChat messages.
Sign-in records: each sign-in is recorded with its date, the method used and an approximate location (country, region, city, time zone) estimated from your network address — never the IP address itself. We use this to administer the service.

Methods marked «if enabled» appear in the app only when we have turned them on.

Where your data is stored

LazeCast runs on Cloudflare's global infrastructure. Your data is stored in Cloudflare-managed databases and object storage and may be processed in data centers around the world, including in the EU.

Third parties

Weather providers. To fetch a forecast we send the coordinates of the requested location to Open-Meteo and MET Norway (and to additional providers such as OpenWeatherMap only if we have enabled them). Providers receive coordinates only — never your name, account or contact details.
Google, Telegram, Apple and WeChat (Tencent). Involved only if you choose to sign in with them (OAuth / OpenID Connect).
Email delivery (Resend). Only if you sign in with an email code: receives your email address and the message with the code.
Browser push services. If you turn on notifications, they are delivered through your browser vendor's push service (for example Google, Apple or Mozilla).
Google Analytics / Tag Manager and Microsoft Clarity. Only if we have enabled them, as described above.
Telegram Bot API. Carries feedback-bot conversations.

We do not sell your data. The service currently shows no advertising.

Cookies and local storage

The app keeps its own data (install ID, preferences, caches, your cookie choice) in your browser's localStorage. Signing in sets a single session cookie that only keeps you signed in. If you answer the cookie banner we store your choice in a first-party cookie (lc_consent, one year). Analytics cookies (Google Analytics, Microsoft Clarity) can exist only when we have enabled those tools and — in the EEA, the UK and Switzerland — only after you accept.

How long we keep data

Weather caches: minutes to hours.
Aggregate service counters: up to about 30 days.
Your profile, history, wardrobe and settings: for as long as you use the service, or until you delete them.

Your choices and rights

Anonymous use: your data is keyed to a random install ID. “Clear local data” in Settings removes that ID and all local data from your device; server records tied to the old random ID are no longer connected to you or your device. To request their removal, contact us.
Signed-in use: you can export a copy of your data and delete your account in the app. Deleting deactivates the account and signs you out on all devices; some associated records may persist in storage until they are permanently purged — contact us to request complete erasure.
Permissions: you can revoke geolocation and notification permissions in your browser whenever you like.
Questions or requests: use the channels on the Contact page.

Children's data

LazeCast is intended to be used by adults. Children profiles are entered by a parent or guardian, are optional, and are minimal: an optional name, a gender and a birth date. They are used solely to tailor clothing recommendations, are never shown publicly, and can be edited or removed in the app whenever you like. We do not knowingly collect any data directly from children.

Visitors from mainland China (PIPL)

If you use LazeCast from mainland China, the Personal Information Protection Law of the People's Republic of China (PIPL) applies to how we process your personal information. This section supplements the rest of this policy.

Who processes your data: the operator of the LazeCast service; contact: [email protected].
Cross-border processing: LazeCast has no servers in mainland China. Your personal information is stored and processed outside mainland China — on Cloudflare's global infrastructure and by the providers listed under «Third parties». The categories of information, purposes and methods are those described in this policy; you can exercise your rights with us through the contact in this section.
Your rights: you can access, copy, correct and delete your personal information, ask us to explain our processing rules, and withdraw your consent at any time. Signed-in users can export their data and delete their account in the app; profiles, children profiles, the wardrobe and settings can be edited or removed in the app; for anything else (including records tied to an anonymous install ID), email [email protected]. Withdrawing consent does not affect processing carried out before the withdrawal.
Sensitive personal information: we do not intentionally collect sensitive personal information such as biometric, financial-account, medical/health or religious data. Two optional features may involve information the PIPL treats as sensitive: precise location (only after you grant location permission) and children profiles (under the PIPL, personal information of minors under 14 is sensitive). Both are used only for the purposes described above, and you can turn them off or delete them at any time.
Minors: the service is not directed at children under 14. Children under 14 should use it only with the consent of a parent or other guardian. Children profiles are meant to be added by a parent or guardian, who decides what to enter and can delete them at any time.

Changes to this policy

We may update this policy as the service evolves. The current version is always available on this page; material changes will be reflected in the date above.

Contact

See the Contact page for how to reach us.