Policies
Last updated: May 30, 2026
This page explains how What's My Zone handles privacy, cookies, analytics, account data, and user rights. The service is operated by MyClades, Olof Jönssons gränd 15, 165 53 Hässelby, Sweden. You can contact us at [email protected].
Privacy Policy
Information We Collect
- Location lookups: coordinates, searched places, browser-provided location if you allow it, and the climate result returned by the service.
- API and security data: IP address, request time, endpoint, rate-limit counters, API key status, quota usage, origin domain, and configured allowed domains or IP addresses.
- Account data: email address, password hash, login token, API keys, subscription tier, subscription status, and account settings.
- Billing data: subscription checkout and payment details handled by Stripe. We store subscription identifiers and status, but not full card numbers.
- Contact data: information you send by email or phone.
- Analytics data: page visits and usage events through Google Analytics only if you consent to analytics storage.
- Advertising data: ad impressions, interactions, and related device identifiers processed by Google AdSense for serving and measuring ads.
How We Use Information
- To provide map, hardiness zone, freeze date, frost-safe season, API, widget, and account features.
- To authenticate users, protect API keys, prevent abuse, enforce quotas, and maintain service security.
- To process subscriptions and keep account tiers in sync.
- To respond to support requests and improve reliability, documentation, and product decisions.
- To measure site performance and usage when analytics consent is granted.
Sharing and Processors
We do not sell personal information. We use Google AdSense to serve advertisements on our site. Google AdSense may place or read cookies on your browser, or use web beacons to collect information as a result of ad serving. We may share information with service providers that help operate the service, including hosting providers, Google Analytics after consent, Stripe for payments, geocoding providers, CDNs, and email or support tools. These providers may process information under their own terms and privacy notices.
Geocoding and Browser Location
Search and autocomplete features may send search text or coordinates to third-party geocoding services such as OpenStreetMap Nominatim or Photon. Browser location is requested only when you use a locate feature and approve the browser prompt.
Retention
Account data is kept while your account remains active or as needed for legal, tax, billing, security, and operational purposes. API usage and security logs are retained as needed to enforce quotas, diagnose abuse, and maintain the service. Consent choices remain on your device until you change them, clear storage, the 12-month consent period expires, or the implementation changes.
Your Rights
Depending on where you live, including the EU, EEA, UK, California, and similar jurisdictions, you may have rights to access, correct, delete, restrict, export, or object to the processing of your personal information. You may also withdraw consent or adjust your preferences at any time through Cookie settings in the footer or the AdSense consent interface. California residents may also have rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive information uses, and non-discrimination.
How to Exercise Rights
Send requests to [email protected]. We may need to verify your identity before acting on account-specific requests.
Cookie and Storage Policy
What's My Zone uses essential browser storage for requested site functions. Google Analytics and Google AdSense are optional and managed through the relevant consent banners (disabled by default for European and restricted region visitors until consented).
| Name | Type | Purpose | When Used |
|---|---|---|---|
wmz_consent_v1 |
Local storage | Saves whether analytics is allowed so we do not ask on every page. The choice expires after 12 months. | Essential |
wmz_token |
Local storage | Keeps you signed in to your account dashboard. | Only after login |
wmz_api_key |
Local storage | Lets the map and widgets use your active API key after you sign in. | Only after login or widget setup |
_ga, _ga_*, related GA cookies |
Cookies | Google Analytics measurement, such as distinguishing visits and understanding page usage. | Only after analytics consent |
__gads, __gpi, IDE, test_cookie |
Cookies | Google AdSense cookies for ad serving, frequency capping, fraud prevention, and personalization. | Only after consent (or as allowed by region-specific defaults) |
You can change your choice at any time from the Cookie settings link in the footer. If you reject analytics, the site updates Google consent state to denied and attempts to delete Google Analytics cookies for this domain. Your browser settings may also let you block or delete cookies and local storage.
Security Policy
We use technical and organizational measures intended to protect accounts, API keys, and service infrastructure. No online service can guarantee absolute security. Please keep API keys private, restrict allowed domains and IP addresses where possible, and contact us if you believe your account or key has been misused.
Children
The service is not directed to children under 13, and we do not knowingly collect personal information from children.
Policy Changes
We may update these policies when the service, law, providers, or data practices change. The updated date at the top of this page shows when the policies were last revised.