1. Who is responsible for your data?
SunEclipses is the service described by this policy and is operated from Belgium. The exact legal name and registered postal address of the data controller are still to be inserted before publication. Until those details are confirmed, privacy questions can be sent to [email protected].
SunEclipses is the controller for personal data it decides how and why to use. Payment, analytics, advertising, map, weather, and app-store providers may process data under their own terms and privacy notices as independent controllers or as processors, depending on the service.
2. Information we collect
Information you provide or choose
- Planner inputs: an eclipse year, a searched place, or coordinates you type, select, drop on the map, share, or provide through device location permission.
- Pro purchase information: your email address, selected event and location, order identifiers, payment status, access-link timestamps, and purchase/access state. SunEclipses does not receive your full card or bank details from Mollie.
- Google sign-in: when you choose it for checkout, SunEclipses receives a verified email address after Google’s credential is checked. The sign-in credential itself is not stored as an account password.
- Android purchase information: Google Play purchase tokens and verification responses for the one-time Pro product, including the product, order, region, purchase state, and acknowledgement state. Purchase tokens are encrypted in the application database.
Information created or collected automatically
- Session and preference data: a Laravel session cookie, your selected language cookie (kept for up to one year), and short-lived browser storage used for Pro state, consent choices, interface preferences, and cached terrain results.
- Planner requests: the coordinates and eclipse parameters needed to calculate terrain horizons, weather, viewpoint, maps, and sharing links. Exact coordinates may be stored with a Pro order because they form part of the requested purchase flow.
- Analytics and advertising data: only after the corresponding consent choice, the site may send page views and interaction events to Google Analytics/Tag Manager, Google Ads, Meta, or TikTok. The site filters email addresses, search terms, place names, coordinates, and similar location fields from ordinary event parameters.
- Security and operational data: hosting, web servers, and providers may process request metadata, device/browser information, timestamps, and IP addresses to deliver, secure, troubleshoot, and protect the service. The site also requests its display fonts from Google Fonts.
SunEclipses does not intentionally collect health, biometric, genetic, or other special-category data through the planner. Please do not include sensitive information in a place search, email, or support request.
3. How we collect information
We collect information directly from your forms, map actions, consent choices, device permissions, and purchase actions; from your browser or app when it makes requests to SunEclipses; from Google when you choose Google sign-in; from Mollie or Google Play when a purchase is verified; and from service providers that return map, geocoding, terrain, viewpoint, or weather results.
A place search can be sent to Nominatim/OpenStreetMap or Open-Meteo for geocoding. A selected coordinate can be sent to Open-Meteo, Overpass/OpenStreetMap, terrain tile providers, Google Maps/Street View when enabled, and SunEclipses. Those providers receive the information needed for their response and may process it under their own policies.
4. Why we use information and our legal bases
| Purpose | Typical data | GDPR basis |
|---|---|---|
| Provide the planner and return results for your chosen place | Coordinates, eclipse settings, request data | Performance of a requested service; legitimate interests in operating the site |
| Process, verify, fulfil, restore, and secure Pro purchases | Email, order and payment state, selected event/location, access records | Contract; legal obligations; legitimate interests in fraud prevention and support |
| Measure site use and understand which features need improvement | Consent-gated analytics events and identifiers | Consent |
| Deliver advertising or measure advertising actions | Consent-gated advertising events and identifiers | Consent |
| Protect the service, diagnose failures, and comply with law | Security, request, transaction, and audit data | Legitimate interests; legal obligations |
Where processing is based on consent, you can withdraw it at any time by changing the site’s tracking choice or clearing the site’s stored consent preference. Withdrawal does not make earlier processing unlawful.
5. Cookies, local storage, and tracking choices
Essential session and language storage supports navigation, localization, purchase returns, and Pro access. The planner also uses browser storage for a temporary terrain cache and local interface state. These items do not by themselves send analytics or advertising events.
When tracking is configured, the consent panel lets you choose no optional tracking, analytics, or analytics plus advertising. Analytics scripts and events are loaded only after analytics consent. Google Ads, Meta Pixel, and TikTok Pixel are loaded only after advertising consent. If a provider is not configured, that provider is not loaded. Browser settings can also block or delete cookies and storage, but doing so may remove Pro or language state.
Third-party providers may set their own cookies or identifiers after you consent. Their retention and choices are governed by their policies and controls.
6. When we share information
We share only the information needed for the following service relationships:
- Mollie: hosted web payment processing and payment status. SunEclipses stores order and fulfilment information, not full payment credentials.
- Google: Google Fonts, optional sign-in verification, consented Analytics/Tag Manager or Ads measurement, optional Maps/Street View, and Google Play purchase verification for the Android app.
- Meta and TikTok: consented advertising and interaction measurement when their pixels are configured and advertising consent is granted.
- Map, terrain, weather, and viewpoint providers: place queries, coordinates, and request parameters needed to return the selected result.
- Hosting, email, and infrastructure providers: application hosting, database, logs, email delivery, security, and reliability operations.
- Authorities or advisers: when disclosure is required by law, court order, to establish or defend legal claims, or to protect users and the service.
SunEclipses does not sell personal information or provide it to data brokers. Affiliate links, including links to Amazon for solar-viewing products, may identify the referring site through an affiliate tag; the destination provider receives the click under its own privacy policy.
7. International transfers
Some providers may process information outside Belgium or the European Economic Area. Where EU data-protection law requires a transfer mechanism, the operator should document the applicable adequacy decision, Standard Contractual Clauses, or other lawful safeguard in the relevant processor agreement. The exact provider locations and transfer mechanisms require legal and vendor-contract review before publication.
8. How long we keep information
- Language preference: the site cookie is configured for up to one year, unless you delete it sooner.
- Session data: the standard application session is configured for up to 120 minutes of inactivity.
- Consent and browser cache: optional tracking consent remains in browser storage until changed or cleared; cached terrain data is designed to expire after 30 days and is stored on your device.
- Access links: Pro magic links are valid for 30 days. The related purchase and fulfilment records may remain after the link expires.
- Purchase, payment, and Android verification records: retained for as long as needed to provide access, handle restores, refunds, fraud, disputes, security, accounting, tax, and legal obligations. The exact statutory schedule must be confirmed for the operator’s legal entity and jurisdiction.
- Provider-held data: Google, Mollie, Google Play, Meta, TikTok, map, weather, and other providers apply their own retention periods.
When a retention period ends, we delete, anonymize, or securely isolate the information unless another lawful reason requires continued retention.
9. Your rights
Depending on where you live and the applicable law, you may ask us to access, correct, delete, restrict, or provide a copy of your personal data. You may object to processing based on legitimate interests, withdraw consent for optional tracking, and object to direct marketing. You can also complain to the competent data-protection authority; people in Belgium can contact the Belgian Data Protection Authority.
Send a request to [email protected] and tell us enough to identify the request and protect against unauthorized disclosure. We may ask for reasonable verification. We will respond within the period required by applicable law, normally within one month for GDPR requests, subject to lawful extensions and exceptions.
10. Security
SunEclipses uses HTTPS in transit, access controls, server-side validation, provider verification, short-lived access links, and encrypted storage for Android purchase tokens. Payment credentials are handled by the hosted payment provider rather than stored by SunEclipses. No internet service is completely secure, so please use the service with care and report suspected security issues promptly.
11. Children
The service is not directed to children under 13, and we do not knowingly collect personal data from children for independent account creation. If you believe a child has provided personal data, contact us so we can investigate and delete it where appropriate. The operator should confirm the applicable age threshold and parental-consent rules for each market before publication.
12. Third-party sites and services
The website may link to Mollie, Amazon, Google, map providers, app stores, and other external sites. We do not control their privacy practices. Review their notices before submitting information or completing a transaction with them.
13. Changes to this policy
We may update this policy when the service, providers, law, or data practices change. We will update the effective date and, where a change is material, provide notice through the website or another reasonable channel. Continuing to use the service after an updated policy takes effect means the updated notice applies to future processing, subject to any consent or legal requirements.
14. Contact
For privacy questions, rights requests, or concerns:
SunEclipses privacy contact
[email protected]
Legal controller name and registered postal address: to be confirmed before publication.