Privacy Policy

Last updated: October 8, 2026 · Version 1.1

This page is provided as-is, in plain language, to explain how SunSleuth works. It may be updated as the service grows.

This policy explains what SunSleuth collects, why, and your choices.

What stays on your phone

Without an account, your spots, sky scans, settings and cached weather are stored only in your browser on your device. The camera feed used during a scan is analyzed on the device and never uploaded. Compass and motion data are used live and not stored.

What we collect if you sign in or buy

• Account: your email address and that you signed in with an email link.
• Synced spots (only if cloud sync is turned on in a future version): spot names, precise locations, sky maps and panel/battery settings. Location is sensitive; we'd use it only to compute your results.
• Purchases: plan, status, renewal dates and Stripe customer/subscription IDs. Card details go to Stripe, not to us.
• Technical logs: IP address, browser type and error logs kept by our host for security, for a limited time.

Analytics

We count page views and taps on gear links in a privacy-friendly way: page or link name, day, country and the referring website. No cookies for this, no IP addresses stored, no user IDs. Cloudflare Web Analytics (cookie-free) also measures overall site traffic.

Who processes data for us

• Cloudflare (hosting and analytics), Supabase (accounts and database), Stripe and its Link service (payments, sales tax and receipts; Link is the seller of record for Pro), and an email delivery provider (sign-in emails).
• Open-Meteo (weather): your spot's coordinates are sent to get forecasts and climate data.

Affiliate links (Amazon)

Gear links in the app are Amazon affiliate links, labeled "Affiliate link". As an Amazon Associate I earn from qualifying purchases. A tap passes through sunsleuth.com/go/amazon, where we count the click as described above, then goes straight to Amazon. Amazon may set cookies and record that you came from SunSleuth (our tracking ID) so we can be paid a commission; Amazon's privacy notice applies there. We don't send Amazon your account, email or spot locations, only the product search (for example "200W solar panel") and our tracking ID. We see aggregate commission reports from Amazon, not who bought what.

We don't sell personal data or use it for targeted advertising.

Retention and deletion

Delete everything on your phone in Settings › Your data › Delete all data. To delete your account, contact us (below) from your account email and we'll remove it. Payment records are kept as long as tax and accounting rules require (up to 7 years).

Your rights

You can ask to access, correct, export or delete your data. Contact us and we'll respond within 30 days.

Children

The Service isn't directed to children under 13, and we don't knowingly collect their data.

Security

Data is encrypted in transit (HTTPS). Database access is limited to each user's own rows. No method is 100% secure.

Changes

We'll update this page and the date above, and let you know about material changes.

Contact: support@sunsleuth.com (or @SunSleuth on X).