HookEcho

Privacy

What we collect: nothing you would call data

There is no account system, no telemetry, no ad network and no analytics product that follows you between sites. This page is the specific version of that claim, because the vague version is worth nothing.

The app

HookEcho runs on your own machine and talks straight to the public weather feeds — NOAA's NEXRAD archive and MRMS, the National Weather Service API, and the model buckets. Those servers see the requests, exactly as they would if you loaded a weather page. Nothing is routed through us, because there is no us to route it through: we run no server that the app contacts.

Your settings, bookmarks and chase logs are files on your disk. API keys you enter — for a basemap provider or a mesonet network — stay in your own settings file and are sent only to the service that issued them.

Location is used only if you turn it on, and only to pick your nearest radar. It is not sent anywhere.

This website

Loading a page here contacts, and only ever contacts:

  • api.weather.gov — the live warning counts on the landing page and the per-radar pages. Public data, no key, requested by your browser directly.
  • radar.weather.gov — the live radar loops. Images, hotlinked from the NWS's own server.
  • raw.githubusercontent.com — the screenshots, served from our repository at a fixed tag so GitHub carries the bandwidth rather than us.
  • static.cloudflareinsights.com — Cloudflare Web Analytics, when it is enabled. It is cookieless, records no personal data and does not fingerprint or track you across sites. It exists so we know which pages people read.

The site also answers a request to its own /geo.json, which returns the rough city and coordinates our host already derived from your IP address, so the page can say which radar is nearest without asking your browser for location permission. It is computed per request and never stored, logged or associated with anything.

We set no cookies. There is no login, no newsletter, no form and no comment box, so there is nothing here for you to hand us.

If you would rather check than trust

The site and the app are both in the same public repository. Every network call either makes is in that source, and the desktop app's allowed-host list is compiled in and checked by CI.