Legal
Privacy Policy
Last updated: March 2026
Foulweather Labs is a personal web design company and development lab operated by Cedar Barrett. This privacy policy explains what information we collect, how we use it, and your rights with respect to your data.
What We Collect
Foulweather Labs is a private, invitation-only tool. Accounts are created by the administrator — there is no public registration. The following data is collected when you use the site:
- —Email address and hashed password — used to authenticate your account. Passwords are hashed with bcrypt and never stored in plain text.
- —Session tokens — short-lived tokens used to keep you logged in across requests.
- —Writing tool usage — prompts you submit and AI-generated outputs from the writing tools (chapter outliner, query letter writer, scene writer, etc.) may be stored in the database for session continuity and to allow you to revisit past work.
- —No payment data — Foulweather Labs has no Stripe integration and does not collect or store any payment information.
How We Use It
- —Authentication — your email and hashed password are used solely to verify your identity when you log in.
- —AI writing tools— prompts you submit are sent to Anthropic's Claude API for processing. Anthropic receives your prompt text as part of the API request. Outputs are returned to you and may be stored in the database under your account for session continuity.
- —Account emails — transactional emails (password reset, account welcome) are sent via ZeptoMail from hello@foulweatherlabs.com. We do not send marketing email.
Third-Party Services
The following third-party services are used in the operation of this site:
Anthropic (Claude API)
AI writing tool prompts are processed by Anthropic's Claude models. Anthropic's privacy policy governs their handling of API request data.
ZeptoMail
Transactional email delivery. Your email address is passed to ZeptoMail only when sending account-related emails (password reset, welcome).
Railway
Database hosting. Your account data and writing tool history are stored in a PostgreSQL database on Railway's infrastructure.
Vercel
Web hosting and serverless function execution. Vercel may log request metadata (IP address, user agent) as part of normal infrastructure operation.
Plausible Analytics
Privacy-friendly, cookieless analytics. Plausible does not collect personal data, does not use cookies, and does not track individuals across sites. EU visitors are prompted for consent before analytics are enabled.
Data Retention
Account data (email, hashed password, writing tool history) is retained for as long as your account is active. If your account is deleted, your personal data is removed from the database. Writing tool outputs stored in your account are deleted along with the account.
The HWY 20 road conditions tracker and other public coastal content pages do not collect any personal data — no account is required to view them.
Your Rights
You may request deletion of your account and associated data at any time by contacting hello@foulweatherlabs.com. Requests are processed within a reasonable timeframe.
If you have questions about what data is stored under your account, you may also contact the same address to request a summary.
Contact
Questions about this privacy policy or your data can be directed to:
Foulweather Labs
hello@foulweatherlabs.com