1. Who We Are
This Privacy Policy applies to the Ecowitt Weather Station Alexa skill ("the Skill"). The Skill is operated by an individual developer. If you have any questions or requests regarding your personal data, please contact us at:
Email: mojacar.mutterings@gmail.com
2. What the Skill Does
The Ecowitt Weather Station Skill reads live weather data directly from your own Ecowitt personal weather station and displays or speaks it on your Alexa device. It does not provide general weather forecasts and does not access any weather station other than the one you explicitly link during setup.
3. Information We Collect
When you link the Skill to your Ecowitt account, you provide the following information through our secure account-linking form. This is the only personal data we collect:
| Data item | Required? | Storage |
|---|---|---|
| Ecowitt Application Key | Required | Encrypted at rest |
| Ecowitt API Key | Required | Encrypted at rest |
| Weather station MAC address | Required | Encrypted at rest |
| Camera MAC address | Optional | Encrypted at rest |
| Station name (a label you choose) | Required | Stored in plaintext |
| Account creation timestamp | Automatic | Stored in plaintext |
We do not collect your name, email address, postal address, Amazon account details, IP address, voice recordings, or any usage history.
4. How We Use Your Information
Your data is used for one purpose only:
- To authenticate with the Ecowitt API on your behalf and retrieve live weather data from your own weather station each time you invoke the Skill.
Your Ecowitt credentials are never used for any other purpose, never analysed, and never combined with data from other users.
5. Legal Basis for Processing (GDPR)
We process your data on the basis of contract performance (Article 6(1)(b) GDPR) — the data is strictly necessary to provide the service you have requested by enabling the Skill. Without it, the Skill cannot function.
6. How We Store and Protect Your Data
- Data is held in a private SQLite database on a Google Cloud virtual machine located in the European Union (region: europe-west8, Milan, Italy).
- Your Ecowitt API keys and MAC addresses are encrypted using Fernet symmetric encryption before being written to disk. The encryption key is held separately in server environment variables, not in the database.
- All communication between Alexa and our server uses HTTPS/TLS.
- No third party has access to your credentials. When the Skill fetches weather data, it contacts the Ecowitt API directly from our server using your credentials — your raw credentials are never transmitted to Amazon or any other party.
7. Data Sharing
We do not sell, rent, or share your personal data with any third party, except as follows:
- Ecowitt — your API keys and MAC address are sent to the Ecowitt API (api.ecowitt.net) solely to fetch your weather data. This is the service you signed up for. Ecowitt's own privacy policy governs their use of this data.
- Amazon / Alexa — Alexa passes an opaque, anonymised user identifier to our server with each skill request so we can retrieve the correct credentials. We do not store this identifier.
8. Data Retention and Deletion
Your data is retained for as long as you keep the Skill enabled in your Alexa account.
To delete your data: disable the Skill in the Alexa app and then send a deletion request to mojacar.mutterings@gmail.com. We will permanently delete all records associated with your account within 30 days.
9. Your Rights
If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under GDPR / UK GDPR:
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to restrict processing of your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these rights, email us at mojacar.mutterings@gmail.com. We will respond within 30 days.
10. Children's Privacy
This Skill is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
If we make material changes to this policy, we will update the effective date at the top of this page. Continued use of the Skill after a change constitutes acceptance of the updated policy.
12. Contact
For any privacy-related questions, requests, or complaints, please contact:
Email: mojacar.mutterings@gmail.com
You also have the right to lodge a complaint with your local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).