Privacy Policy

Mast uses location and alert preferences only to show relevant flag status information, operate alerts, provide API access, and review reports about inaccurate information.

Mast is not an official government service. Source links may take you to third-party or government websites with their own privacy practices.

You can select a country and state manually. If you use browser location, your browser asks for permission first. Mast uses that location to estimate the relevant region and stores the selected country and state on your device.

Mast does not need precise ongoing location tracking to operate, and the app does not store a continuous location history in your browser.

Mast may store preferences in your browser, including your selected location, color theme, browser alert choices, email alert preference, SMS alert preference, and notification bookkeeping such as already-seen events.

You can clear this data through your browser settings. Clearing site data may reset Mast preferences and alert settings on that device.

Browser alerts require permission from your browser. If enabled, Mast uses browser notification features for local reminders while the app is open and for newly detected feed notices. Push notification delivery may store a browser-generated push subscription endpoint and related keys so Mast can deliver notifications to that browser.

Email alert preferences are stored by Mast when email delivery is configured. Mast uses the email address, selected location, and alert preferences to send morning updates when there is a flag order for the selected location and newly detected feed notices. Each Mast alert email includes a link to unsubscribe from that saved email alert subscription.

SMS alert preferences may be stored by Mast when SMS delivery is configured. Mast uses the phone number, selected location, and alert preferences only for requested Mast text alerts and related opt-out handling.

If you report inaccurate flag information, Mast sends the selected location, your optional contact information, and your report text to the site operator for review.

API requests may include a license key and ordinary request metadata such as time, route, response status, IP address, and user agent. Mast may use that information to operate the service, diagnose issues, protect against abuse, count accepted and rejected API requests, and understand usage.

Developer and admin account features may store account email addresses, subscription records, API license records, authentication state, and passkey public credential information. Mast does not need to store passkey private keys, and passwords should be stored only in protected derived form.

Mast may use an AI service to summarize public flag orders and extract titles, descriptions, and date ranges. The information sent for that purpose is source content about public flag orders, not your private alert preferences.

AI-generated summaries are reviewed through Mast's source and parser workflow where practical, but they can still be incomplete or wrong. Official source links remain the best place to verify details.

Mast includes page areas intended for sponsorships or advertising. Mast may show its own support messages, direct sponsor messages, or a controlled third-party ad placement, such as Google AdSense. Third-party ad services may set cookies or collect usage data according to their own privacy terms.

Email, SMS, hosting, push, analytics, AI, payment, or advertising providers may process limited service data on Mast's behalf when those features are configured.

Mast keeps service records only as long as reasonably needed for the feature, operation, security, troubleshooting, legal, or business purpose involved. Some cached source data, event logs, API metrics, and account records may persist across deployments when persistent storage is configured.

For privacy questions, requests, or corrections, use the contact method published with the Mast project or site owner.