Privacy Policy

1. Information We Collect

• Automatically Collected (via Analytics): Usage data like IP address, browser type, device info, pages viewed, time spent, referral sources, and interactions (e.g., inputs for previews). Collected via Posthog (self-hosted/open-source analytics) for site improvement and performance monitoring. No personally identifiable information (PII) tied to individuals unless anonymized.
• Anonymous Conversion Counters (Essential): We record aggregated funnel steps (for example landing view, checkout start, payment verification) to monitor checkout reliability and detect regressions. These counters are not used for ad targeting and do not store map content.
• Payment Data (via Stripe): For premium unlocks (single downloads, bundles, or subscriptions) and physical print orders, Stripe processes payment details (card info, billing address if provided). For physical print Checkout, Stripe may also collect a phone number and shipping address needed for delivery. We do not store or access full payment card data—Stripe handles it securely under their privacy policy. Shipping details and, when provided, phone number are retained only as needed to fulfill the print order (see Data Storage and Security).
• Voluntary Email Submissions: If you submit your email for updates or promotions, we store your email address and send a welcome email plus occasional follow-ups (e.g., printing tips). You can unsubscribe at any time.
• Post-Purchase Access (account-lite): When you pay, we associate your checkout email with purchase records so you can open My Downloads via magic link or recovery email. We use hashed identifiers in some server records; session cookies for the hub expire automatically. We do not require a password.
• Local Browser Storage: Draft inputs (localStorage) and premium unlock status (cookies for functionality, e.g., auto-save previews and download access). Stored on your device; only transmitted when needed for checkout or download.
• Cookies: Essential cookies for site function (e.g., premium status, cookie consent banner). Analytics cookies via Posthog (anonymous). No marketing/third-party advertising cookies.

We collect direct contact details (such as checkout email, and for physical prints a shipping address and phone number when provided at Checkout) only as needed to complete your order, fulfill physical prints, send purchase/access emails you request, or when you voluntarily submit an email for updates.

2. How We Use Information

• Provide and improve the service (generate accurate star maps using astronomy libraries).
• Process payments securely via Stripe.
• Fulfill physical print orders (pass shipping address and, when available, phone number to our print fulfillment partner so carriers can deliver the order).
• Analyze anonymous usage (Posthog) to fix bugs, optimize performance, and understand features.
• Comply with legal obligations.

No data sold or shared for marketing.

3. Third-Party Services

• Stripe: Processes payments and Checkout collection (including shipping address and phone for physical print orders). Subject to Stripe's Privacy Policy. We receive transaction confirmation and order delivery details needed for fulfillment (no full card details).
• Printful: Print and shipping fulfillment processor for physical orders. When you buy a print, we share the shipping recipient details required to produce and deliver the order (name, address, email when available, and phone when provided at Checkout). Subject to Printful's privacy terms.
• Posthog: Analytics tool configured for anonymized data; no PII collected. See Posthog privacy.
• Cloudflare: Hosting and edge infrastructure.
• Astronomy Libraries: Client-side processing (no data sent).

These providers act as processors; we ensure compliance via agreements.

4. Data Storage and Security

• Data processed at the edge (Cloudflare Workers) with TLS encryption.
• Purchase and access records (email-linked sessions, magic-link tokens) are stored in edge KV with TTLs; we do not operate a traditional profile database with passwords.
• Physical print-order records (including shipping details and checkout phone when provided) are stored in edge KV with a bounded retention window aligned to fulfillment and short-term support (default 60 days, then automatically expire). Phone numbers are used only for Printful/carrier delivery and are not exposed in ordinary operator status/retry log output.
• LocalStorage/cookies are device-specific.
• Retention: Analytics anonymized/retained as needed for improvement (up to 12 months); payment records per legal requirements; print-order fulfillment records per the bounded KV TTL above.

We implement reasonable security (encryption, access controls) but no system is fully secure.

5. Your Rights (GDPR/CCPA/Others)

• Access, correct, delete data: Contact support@starmapco.com.
• Opt-out analytics: Clear browser cookies/storage or use Do Not Track (honored where possible).
• CCPA: No sale of personal information.
• GDPR lawful basis: legitimate interests (analytics/service), contract (payments). International transfers via adequacy/standard clauses.
• Children under 13: Service not directed; no knowing collection.

6. Cookies and Tracking

Essential cookies and anonymous funnel counters are used for core service operation. Optional third-party analytics (GA4/PostHog product analytics) only run after consent via banner. Manage via browser settings.

7. Changes to Policy

We may update; changes posted here with a new date. Continued use constitutes acceptance.

8. Contact Us

Questions: support@starmapco.com