Privacy Policy

Last updated October 15, 2026

Overview

No account is required to use Lightning Tracker. The app does not include advertising, cross-app tracking, analytics, or third-party SDKs. We do not sell your personal data. This policy explains local storage, location-related requests, Apple services, and service protection.

Location access

The app requests location access only while you are using it, not Always access. Your location is used on your device to calculate distances to strikes and evaluate proximity alerts. The app stores the last known location and its age and accuracy; this is not continuous background location tracking. You can use saved places without granting access to your device location.

Location information also forms part of weather requests, as described below. It does not all stay on your device.

Data stored on your device

Saved places, your last known location, preferences, alert history, snooze settings, and return-wait state are stored locally using Apple platform storage. The app also keeps local weather-response and radar caches. Clear Data in the app removes saved locations and alert history and resets settings and return-wait state; some setup flags, service-limit records, caches, and security credentials remain.

Deleting the app removes its local app-container data. This does not erase existing device backups or the separate service-protection records described below. Apple Keychain storage is separate from the app's ordinary data storage.

Weather requests through our server

Xweather, Tomorrow.io, and Rainbow.ai requests pass through our Cloudflare-hosted proxy, which adds provider credentials and forwards the query. The providers receive these requests from the proxy. Its application code does not copy your device's incoming IP-forwarding headers to provider requests.

• Xweather — lightning: requests contain the coordinates of a search-area center, a radius, and a time window. The center can be your current or saved location; it is not always rounded to a grid. Larger areas can use multiple overlapping search circles. The app uses request radii of up to 36 km or 90 km, depending on the endpoint.
• Tomorrow.io — storm forecasts: requests contain coordinates for your current location and saved places used by the app, rounded to 0.01 degrees, and the relevant timezone.
• Rainbow.ai — radar: requests identify radar snapshots and map tiles by zoom level and tile numbers. These identify the geographic area shown on the map.

Network processing and retention

Cloudflare processes your IP address and connection metadata to deliver and protect the service. The proxy code does not create a history of your weather requests or locations and does not write application request logs. Infrastructure-level processing and logging are subject to Cloudflare's service configuration and practices. Radar tiles and their geographic cache keys may be cached according to the provider's cache settings.

Weather providers process forwarded queries under their own terms and privacy practices. Our proxy does not control their retention of those queries.

Apple services

Apple WeatherKit may receive location coordinates directly through Apple's framework to fill missing temperatures. Apple map and place-search services may process the map area, search text, and coordinates used to find or name a place. These services are subject to Apple's privacy policy.

Service protection

The app uses Apple App Attest to verify requests from genuine copies of the app. Our server stores an installation's key identifier, public key, verification environment, and registration time in Cloudflare storage. These records are not linked by the app to your name or Apple ID and currently have no automatic expiration.

The app stores its key identifier in the device's Keychain. Session tokens last one hour. The service also uses IP addresses for registration rate limits and key identifiers for weather-request rate limits. Removing local app data does not delete server verification records.

Notifications and background refresh

Strike alerts are local notifications created on your device, subject to your permission and iOS settings. The app does not register an APNs push token or use a server push-notification service. iOS may allow background refresh to check for strikes; timing and delivery depend on the system and are not continuous.

Purchases, if offered

If the app offers purchases, Apple processes them. We do not receive your payment card details.

Children

Lightning Tracker does not provide child accounts or ask for a child's name or age. If you believe a child has provided personal information to us, contact support@lightningtracker.cc so we can address the request.

Your choices and rights

You can revoke location and notification permissions in iOS Settings, remove saved places, use Clear Data, or delete the app. Depending on where you live, you may have rights to access, correct, delete, or restrict processing of personal data. Send privacy requests to support@lightningtracker.cc. Because there is no user account, we may need information to identify a relevant service record.

Support and this website

If you email support, you choose what information to include. Please avoid sending precise locations or other personal information unless needed to explain the issue. These website pages contain no analytics scripts, advertising, or embedded third-party resources.

Changes

We will update this policy when data handling changes and revise the date above. Questions about this policy can be sent to support@lightningtracker.cc.