In short
- You can use the map without an account. The page then keeps one visitor cookie and a few settings in your browser, and nothing else about you.
- An account stores the email address or mobile number you sign in with (encrypted on the server), the stations you watch and your alert settings. You can delete it yourself at any time.
- Your browser talks only to this site while you use it, plus Google Maps or PayPal when you tap those buttons, Google's tag and ad code on the map page, where the page has them (see Advertising), and CARTO for its street map when you zoom in on streets outside the US and Canada.
- Nothing is sold, rented or shared for marketing. The weather sources never learn who you are: this server fetches the data and passes it on.
About this tracker
The tracker shows, for Amazon Flex delivery stations and other Amazon sites in the United States, Canada and around the world, the weather reports and advisories that usually go with a station closing its doors: severe weather warnings, tornado warnings, lightning within a few miles, and Flexers' own reports. It adds the national weather radar with the model's hour ahead, and a 12-hour and 3-day forecast per station. Everything comes from public sources: the National Weather Service and NOAA for advisories, radar, forecasts and lightning, Environment Canada for the Canadian stations' forecasts, warnings and lightning (Data Source: Environment and Climate Change Canada, under its Data Server End-use Licence), Visual Crossing and MET Norway for the forecasts and warnings elsewhere, the Japan Meteorological Agency for Japan's warnings, lightning and thunder nowcast, the Meteorological Service Singapore's lightning network through data.gov.sg for the strikes around Singapore (Singapore Open Data Licence), Open-Meteo for the weather models' thunderstorm forecasts behind the lightning risk (Weather data by Open-Meteo.com, CC BY 4.0), Rainbow.ai for the radar beyond NOAA's reach and the world view's next-hour rain, NASA's GIBS service and EUMETSAT's EUMETView for the world view's moving satellite clouds (Meteosat: contains modified EUMETSAT Meteosat product, CC BY 4.0), airport weather reports, national lightning databases, and public station lists. This server asks them for the weather; none of them is ever told who is looking. It is an independent tool built by a driver for drivers, run on a single small server at stationclosed.com. The About and FAQ page explains how the status is worked out.
It is not affiliated with, endorsed by or connected to Amazon.com, Inc. or its affiliates. "Amazon Flex" names the delivery program the tracked stations belong to. The status shown is an unofficial reading of public weather information; station leadership makes the final call on closures, and a block is never guaranteed either way.
What the page keeps in your browser
Everything below is essential to the site working (signing in, fair use, your own settings) and is set without asking. The only optional cookies are Google's, on the map page when ads are on: Google personalises its ads only if you press "Accept all" in the cookie bar, and never when your browser sends a Global Privacy Control signal. "Essential only", or not answering, keeps ads non-personalised, and keeps the Google tag, where the page has it, from setting any cookie (see Advertising). Change your answer any time with "Cookie choices" at the bottom of the map page.
| Name | What it is for | How long |
|---|---|---|
afwt_v (cookie) | A random, signed visitor id set on your first visit, signed in or not. It ties your refresh clock and the fair-use limits to your browser instead of to your network address, so drivers on one carrier network don't share an allowance. It holds no personal detail and is not linked to an account. | One year |
afwt_session (cookie) | Your signed-in session: a signed token, no password (there are none). Set only when you sign in. | 60 days at most, or 30 days without a visit; ends when you sign out |
afwt_d (cookie) | A random device id, set when you first sign in on this browser, so the account can tell your phone from your laptop and list them. | One year |
afwt_lang (cookie) | Your language, English or Spanish, if you picked one with the language switch or link. Without it the page follows your browser's language. | One year |
afwt_consent (cookie) | Your answer in the cookie bar (accept all, essential only, or "OK" on a page without ads) and when you gave it, so the bar doesn't ask again. | One year |
afwt.theme.v1 | Light mode, or matching your device, if you chose it in Settings (the tracker is dark otherwise). | Until you change it |
afwt.units.v1 | °F, mph and miles or °C, km/h and km, if you chose them in Settings (otherwise the page guesses from your device's time zone and language, on the device only). | Until you change it |
afwt.prefs.v1, afwt.home.v1, afwt.favs.v1 | Your view settings (filters, sorting, map layers), the station you picked in the search, and the stations you starred, so the page opens where you left it. | Until cleared |
afwt.changead.v1 | Counts station changes, so the station-change banner appears on a random one of every few changes and never the first. | Until cleared |
afwt.checkoutAt | When you last started a purchase, so the buy button waits a minute before starting another. Only ever written when plans are on sale. | Until cleared |
afwt.donate.v1 | When you close the donations banner: the next midnight on your device, so the banner stays away until then and shows again the next day. Only ever written when donations are on. | Until cleared (ignored after that midnight) |
afwt-scango (IndexedDB) | Only if you use the Scan & Go tracker and tick "Keep it unlocked on this device": the key that opens your tracker, kept in a form your browser can use but cannot hand out, so you don't type your passphrase every visit. It never leaves your device. | Until you lock the tracker or clear site data |
On an https address the sign-in, device and visitor cookies carry the browser's __Host- prefix, which pins them to this site. Apart from Google's optional cookies above, there is no other storage, no analytics beyond Google Analytics on the map page (see Advertising) and no fingerprinting. Clearing site data in your browser removes all of the above; the page then starts as a new visitor.
Accounts
You don't need an account to see the map. If you create one, this server stores: the email address or US mobile number you sign in with (encrypted at rest with a key kept apart from the data, and only ever shown masked in logs); when the account was created and last used; the stations you watch and your home station; your alert radius, quiet hours and muted stations; the devices signed in (a coarse label such as "Windows · Chrome", never the full browser string); any passkeys or authenticator app you added; any push-notification subscriptions your browsers registered (encrypted); your plan and the purchase records that gave it to you; and reports you send about a station being closed or open, kept 30 minutes under a keyed hash of your account. Sign-in codes are never stored: they live in memory for ten minutes and are gone.
Your address is used to send you the codes and the alerts you asked for, and for nothing else. There are no newsletters, no marketing, and no sharing with anyone. Delete your account from the account page ("Delete this account"): the record is removed at once, with its devices, subscriptions and alert history, after the same confirmation step as any other security change. A free account that has not signed in for about 18 months and never bought anything is removed by itself. There is no export button: the account page shows everything the account holds. Payment records may be kept by the payment processor under its own rules.
If you sign in with Google or Apple, the sign-in dialog sends you to Google's or Apple's own page and they send you back; neither company's code runs on this site. This server receives only their id for you and your email address once they confirm it (with Apple's "Hide My Email", the relay address Apple gives the tracker); it keeps the id, encrypted like your address, so the same button opens the same account next time, and asks for nothing else: no name, no photo, no contacts. If an account already uses that email address, it is the one opened, and the address gets an email saying so. Remove the Google or Apple sign-in from the account page at any time; your email code keeps working. Google's and Apple's own privacy policies apply on their pages.
The Scan & Go tracker, a perk of the paid plans, is different: what you log there (your blocks, payouts, times of day and package counts) is encrypted in your browser before it is sent, with a key that only your passphrase or your recovery code unlocks. This server stores the encrypted copy, when it was last saved and its size, and never receives your passphrase, your recovery code or the key, so neither the operator nor anyone who got hold of the server or its backups can read it. That also means nobody can recover it for you if you lose both. Download a readable copy from the tracker at any time; delete it there, or delete your account, and the encrypted copy is removed at once. If your plan ends, the tracker is kept and stays readable and deletable, but can't be added to.
Weather data and other sources
This server fetches everything itself, on a schedule, for everyone at once: advisories, tornado-warning polygons and forecasts from the National Weather Service, the Canadian stations' forecasts and tornado warnings from Environment Canada, base map tiles from USGS and Natural Resources Canada, radar frames from NOAA, the hour-ahead radar from NOAA's forecast model, lightning reports from national lightning databases, forecasts outside the US and Canada from Visual Crossing and MET Norway, radar outside NOAA's reach from Rainbow.ai, airport weather reports, a global forecast model's gusts and thunder from NOAA, official warnings from the national weather services (the Japan Meteorological Agency, the India Meteorological Department through NDMA's SACHET, the Met Office, Mexico's SMN, Brazil's INMET and MeteoAlarm), Japan's weather stations and lightning network from the Japan Meteorological Agency, security-incident notes from police dispatch and local news, and station locations from public station lists. Those services see this server's address and a contact email, never yours. Your browser downloads the results, the map libraries and the fonts from this site alone, with one exception: outside the US and Canada, from the city zooms in, the street map comes from CARTO (© OpenStreetMap contributors, © CARTO), whose terms require your browser to load its tiles from CARTO directly. CARTO then sees your network address and which part of the map you are looking at, under its own privacy policy; it is not told anything else about you.
A station's "Share" button opens your phone's own share menu, or offers links to WhatsApp, Facebook and Reddit: nothing goes to any of them unless you pick one, and then only the station's link and status, as you send it. A shared link shows a preview (the station's status, and a picture of it this server draws itself), which the app showing the preview fetches from here.
On the Spanish pages, the weather services' own words (forecast phrases, warning headlines) and the long pages like this one are translated by a machine-translation service when the operator has set one up: this server sends it only those texts, never anything about you, and keeps each translation so a text is sent once. The rest of the Spanish site is translated by the tracker itself.
Two buttons open other companies' sites in a new tab: "Directions" (Google Maps) and checkout (PayPal). Their privacy policies apply from the moment you tap. The site is served through Cloudflare, which relays traffic between your browser and this server and applies its own privacy policy to what it handles.
When you search for a station by address, the page ranks the stations nearest you first. For that it may use the country, state or province and rough position (to about a kilometre) that Cloudflare works out from your network address and passes along with the page, the station you already picked, and your device's time zone. The country also picks where the page starts: the stations of the country you are in, until you choose another in the menu. Nothing of this is stored or sent anywhere: it only orders the results and sets the starting view in your browser.
The "Near me" button asks your browser for your location, once each time you press it, and only then. The page uses it to list the stations closest to you and to put a dot where you are on the map. It is not stored, not sent to this server and gone when you leave the page. Your browser asks you first, and you can refuse.
Advertising
Visitors and free accounts see ads served by Google AdSense; paid plans see none. Third-party vendors, including Google, use cookies, web beacons and IP addresses to serve ads based on your prior visits to this website or to other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of third-party vendors' use of cookies for personalised advertising at www.aboutads.info. How Google uses information from sites that use its services is described at policies.google.com/technologies/partner-sites. Visitors from the European Economic Area, the United Kingdom and Switzerland are shown no ads and load no ad code at all.
The ad code runs only on the map page, in the three labelled ad spaces; there are no ads in dialogs or over the map. The account page, the sign-in steps and this page share no document with it, so nothing an ad loads can read what you type there.
The map page also loads the Google Ads tag (Google's gtag.js), which tells Google when a visit came from one of the tracker's own ads on Google, so the operator can see which of those ads bring drivers in. If you press "Accept all" in the cookie bar, it sets Google's advertising cookies (such as _gcl_au) and may add your browser to a list for showing the tracker's ads to past visitors elsewhere. With "Essential only", no answer, or a browser sending Global Privacy Control, it sets no cookies and sends Google only cookieless pings (that the page loaded, with any ad click identifier removed). It is not loaded on the account page, the sign-in steps or this page, nor for paid plans or visitors from the European Economic Area, the United Kingdom and Switzerland. How Google uses the data is described at policies.google.com/technologies/partner-sites.
The map page also runs Google Analytics through the same tag, which counts visits and page views and, with Google's default settings, how far the page was scrolled and which outside links were tapped (the tracker sends it no events of its own), so the operator can see how many drivers use the tracker and when. If you press "Accept all" in the cookie bar, it sets Google's analytics cookies (_ga and _ga_*, kept for two years) to tell returning visitors from new ones. With "Essential only", no answer, or a browser sending Global Privacy Control, it sets no cookies and sends Google only cookieless pings (the same counts, with no identifier kept between visits). Google Analytics does not log or store IP addresses. It is not loaded on the account page, the sign-in steps or this page, nor for paid plans or visitors from the European Economic Area, the United Kingdom and Switzerland. How Google uses the data is described at policies.google.com/technologies/partner-sites.
Purchases
PayPal handles checkout: you pay on PayPal's own pages and PayPal tells this server that the order was paid. This server keeps the PayPal order id and the purchase record with your account; it never sees your card or bank details. PayPal's privacy statement covers what PayPal keeps.
Stripe handles card payments (and Link, Stripe's saved-details wallet): you pay on Stripe's own checkout page and Stripe tells this server the payment went through. This server keeps the checkout session id and the Stripe customer id (and for a renewing plan the subscription id) with your account; it never sees your card number. A payment the card's issuer reports as likely fraud is refunded and the plan taken back. Stripe's privacy policy covers what Stripe keeps.
We use Stripe for payment, analytics, and other business services. Stripe collects identifying information about the devices that connect to its services. Stripe uses this information to operate and improve the services it provides to us, including for fraud detection. You can learn more about Stripe and read its privacy policy at https://stripe.com/privacy.
Bitcoin invoices give you a fresh address derived from the site's public key. The server watches the public Bitcoin blockchain for the payment through a block explorer and keeps the address and the transaction id with your account. Blockchain transactions are public by nature.
Solana invoices are recognised by a reference key on the public Solana network. The server keeps the transaction id with your account; the paying wallet address is visible on the public blockchain, as all Solana transactions are.
ETH invoices (Ethereum and Robinhood Chain) are recognised by their exact amount, read from the network's public block explorer (Blockscout). The server keeps the transaction id with your account; the paying address is visible on the public blockchain, as all such transactions are.
The Donate button in the top bar and the donations banner over the map open PayPal in a new tab. A donation is handled entirely by PayPal under its own privacy statement: this server is not told who donated, keeps nothing about it, and grants nothing for it. Closing the banner is remembered in your browser's storage only, until the next day.
Sign-in codes and alerts
Accounts, alerts and purchases are switched off on this tracker at the moment: nothing beyond the visitor cookie and the browser storage above is kept about you.
Fair use, security and logs
The server keeps short-lived counters in memory, by visitor id and by network address, to spread the shared weather feeds fairly and to stop abuse: how often a page or the status was requested, how many station details and which stations were opened in the last hour, how many codes were sent, wrong answers to the picture puzzle, and whether a request was refused. Heavy use (many station requests in a minute, more than 100 different stations in an hour, many searches in a minute) brings up a picture puzzle before the page carries on, as does asking for a sign-in code. Before a code goes to an email address, the server checks that the address can receive mail: its spelling, whether its domain takes mail (a DNS lookup) and whether it is a throwaway inbox; when an alert email bounces or is marked as spam, the mail service tells this server, and email alerts to that address pause after repeated bounces until you confirm the address again. Those counters are not written to disk, and network addresses are never stored with an account. The server's log records start-up, errors, refused requests, sign-ins and administrative actions, with the network address they came from; ordinary page views and data requests are not logged at all. The log is kept on the server for a limited time and rotated by the operating system. If a browser reports that the page's security policy blocked something, the report (the blocked address and the page, nothing personal) is logged the same way. The site is reached through Cloudflare, which keeps its own short-term traffic logs under its policy.
Your choices
- Use the map without signing in.
- Sign out from the account page, sign out any other device from the device list there, or delete the account there.
- Stop alerts with the link in any alert email, or reply STOP to a text.
- Pick light or dark mode in Settings; allow or block ads in your browser: the page works either way.
- Opt out of personalised ads with the links under Advertising.
Children
The tracker is for adult delivery drivers and is not directed to children. No account is knowingly kept for anyone under 13; write to the address below to have one removed.
Changes
When this page changes, the date at the top changes with it. The tracker's own code, including this page, is what actually runs; the description here is kept in step with it.
Contact
Questions, deletion requests or corrections: support@stationclosed.com.