Privacy policy, data source and cookies

Privacy policy – Orelis365.lt website and Orelis 365 mobile app

Last updated: 2026-08-24

1. Introduction

This privacy policy explains how we collect, use and protect your data when you use the Orelis365.lt website and the Orelis 365 mobile application (the “app”). We do not collect your name or other identity documents. An email address is collected only if you subscribe to the weekly forecast by email. Otherwise we process technical and location data needed for weather services, notifications and statistics.

2. Data we collect

2.1. Location data

• The app may use your device location (GPS or network coordinates) to show weather for your location and to find the nearest place.
• Coordinates are sent only to our servers (orelis365.lt / api.orelis365.lt) to determine the nearest place and are not stored as your personal location history.
• Location permission is optional – you can always choose places manually. If you grant “always” permission, location may be used in the background (widget, notifications).

2.2. Technical and usage data (no personal data)

• Installation_id – an anonymous ID generated per app installation, used for unique user statistics and error diagnostics, not linked to your name or email.
• Crash data – error message, screen where the crash occurred and technical details (device model, OS version) to help us fix issues.
• Usage statistics – a daily “heartbeat” event (once every 24 h) and screen views/events (via Firebase Analytics) without personal data.

2.3. App notifications (push)

• The app may register an FCM (Firebase Cloud Messaging) token to send weather notifications (daily summary and official LHMT warnings for your selected place).
• We store the token together with optional place code, language and device technical details.
• Notification permission is optional and can be revoked at any time in your device or app settings.

2.4. Browser notifications (web push)

• On the website you may enable LHMT warning notifications in the browser. Then we store a Push API subscription (endpoint and encryption keys), the selected place and language on our servers.
• This is not an email address and is not linked to your name. You can disable notifications on the city page or in browser settings.
• Subscriptions are removed when you disable notifications or when the browser reports them as expired.

2.5. Website data

• When using the website, standard log data may be collected (IP address, access time, browser type) and cookies / local storage as described in the “Cookies” section below.

2.6. Weather forecast subscription

• If you subscribe to the weekly weather forecast by email, we collect and store your email address and the location you selected so that we can send you the weekly forecast. We keep this data for as long as your subscription is active. You can unsubscribe at any time using the link in each email.

3. Purposes of data use

• Providing weather services and personalisation by location.
• Analysing and improving the performance of the app and website.
• Error diagnostics and testing.
• Sending weather notifications (if you have agreed to receive them).

4. Legal basis

• Contract performance – necessary to provide weather forecasts and related features.
• Legitimate interest – service quality analysis, security and bug fixing.
• Consent – for location and notifications where required by law or platform rules.

5. Data retention

• Telemetry and crash logs on the server are typically stored for a limited time (e.g. up to 12 months) and then anonymised or deleted.
• Aggregated statistics without identifiers may be kept longer.
• App FCM tokens are kept while you use notifications; unused Android tokens may be removed after prolonged inactivity (about 60 days). Browser push subscriptions stay until you disable them or the browser reports the subscription as expired — they are not deleted merely because no warnings were sent.

6. Data recipients and transfers

• Our servers (orelis365.lt / api.orelis365.lt) – location coordinates to determine the nearest place, telemetry records, anonymous statistics, FCM tokens and browser push subscriptions.
• Google Firebase – Analytics and Cloud Messaging (app) under Google’s privacy policy. Browser push is delivered via the browser push service (e.g. Google/Mozilla) using your subscription endpoint.
• Data is transmitted over encrypted connections (HTTPS).

7. Your rights

• Request access to your personal data and obtain a copy where applicable.
• Request correction of inaccurate or incomplete data.
• In some cases, request deletion of data or restriction of processing.
• Object to processing based on legitimate interest.
• Withdraw consent (e.g. for location or notifications) in your device or app settings.
• Lodge a complaint with the relevant data protection authority.

8. Contact

For questions about this privacy policy or data processing, contact us at [email protected] or via the “Contact” page on the website.

Data is provided under the Creative Commons Attribution-ShareAlike 4.0 (CC BY-SA 4.0) licence; you must comply with the licence terms.

Data may only be used for lawful and defined purposes.

Data is provided as-is without any warranty; LHMT is not responsible for data quality or fitness for a particular purpose.

LHMT is not liable for any loss or damage arising from the use or inability to use the data.

When publishing or using the data, the source must be stated as LHMT. Failure to attribute may result in access to the data being terminated.