Privacy
Above Tonight runs no analytics cookies, scripts or visitor identifiers, and it keeps your location and motion readings on your device. This page says what is collected anyway, by whom, why and for how long.
Who is responsible
Filip Gruszecki runs Above Tonight and is responsible for this site and this notice. Exode is the name he publishes his projects under. He is the controller of the personal data described here and can be reached at hello@abovetonight.com.
Location and motion
Above Tonight asks for your device's location only when you choose "use this device's location", or when you turn on Motion on a phone. It asks for the phone's motion and orientation sensors only when you turn on Motion. Your browser or phone asks for permission where it requires one, and you can refuse: the sky then stays on the place you chose.
When you choose one of these controls, the page uses the readings only in your browser, to draw the sky and turn the view. The legal basis is your consent (Article 6(1)(a) of the GDPR), which you give with that control and, where required, your browser's permission prompt. You can refuse and choose a city or enter a place instead. You can withdraw consent at any time: choose a city or place, turn Motion off, or remove this site's permission in your browser settings. Withdrawing does not affect earlier use.
Location is rounded to 0.05 degrees, about 5 kilometres, before it is used, and the exact fix, its accuracy and its altitude are discarded. Above Tonight does not save these readings and does not send them anywhere.
To choose the city it starts on, the page reads your device's time-zone setting in the browser; the setting is not sent or stored.
Shared links
When you share a sky, the link carries the place, elevation, time, view direction, zoom and selection it shows, after a # sign. A browser never sends the part of a link after the # sign to a website, so our host does not receive it. It is not encrypted, though: anyone you give the link to, and the apps and services that carry it, can read it.
Links from our own guide pages into the sky add a short topic marker after the # sign. The page reads it and removes it from the address. It is not sent or counted.
What our host collects
Above Tonight is hosted by Cloudflare. Like any website host, Cloudflare receives ordinary request data when you open a page: your IP address, the address you asked for, browser details and the page that linked to us. If a link to us includes a query, the part after a ? sign, the host receives that too, although the site ignores it. Cloudflare's Network Error Logging asks your browser to report to Cloudflare when a page fails to load; a report carries your IP address, the page address and the type of error, and Cloudflare uses it to monitor its network.
We view only Cloudflare's aggregate totals: counts of requests, approximate countries and counts per file, kept for about a month. We use them to see which pages are requested, and treat requests for the sky's data file as a rough sign of how often the map opens. We read totals and do not look up individual visitors, and the statistics we keep carry no identifiers.
Why we use data and who receives it
We rely on our legitimate interests (Article 6(1)(f) of the GDPR) for three purposes: delivering the site and keeping it secure; counting how it is used, from Cloudflare's aggregate totals only; and answering the mail people send us. The optional location and Motion features rely on your consent instead, as explained above.
Cloudflare processes request data, our statistics and our email routing on our behalf, as our processor under its standard data processing agreement. For the data it uses to protect its own network, Cloudflare is a separate controller under its privacy policy. Cloudflare may handle data in the United States, under the EU–U.S. Data Privacy Framework, with standard contractual clauses in its data processing agreement as a fallback (cloudflare.com/trust-hub/gdpr).
Messages sent to hello@abovetonight.com are forwarded by Cloudflare's email routing to a Gmail mailbox. Cloudflare keeps a log of each delivery (sender and status) for about a month. Google handles that mailbox under its own privacy policy. We use your message and address only to answer you. We keep a conversation for 24 months after its last message, then delete it.
Search engines
Search engines' webmaster tools, Google Search Console and Bing Webmaster Tools, tell us how many people reach the site from search and which searches led them here. They report that under their own policies. We do not see what you do in the sky.
Cookies, storage and other sites
The site sets no cookies. When the welcome panel is shown, the map page saves one small marker, above-tonight:intro-seen=1, in session storage, so the panel stays closed when you return to the map in the same tab. It stays in your browser and is never sent to us or our host. It usually ends when you close the tab, though a restored or duplicated tab may keep it, and you can remove it by clearing this site's data. The site has no accounts, advertising or tracking code. Every script, style sheet, image and data file comes from this site's own domain, and nothing is loaded from other sites.
Some notes about constellations, the Sun, Moon, planets and stars link to outside sources. Those links open in a new tab only when you choose one, and that site then sees your visit under its own policy.
Your rights and contact
You may ask us for access to your data, to correct or delete it, to restrict its use, and to object to processing that rests on our legitimate interests. For ordinary visits we cannot identify you from what we hold, so there is usually nothing to find. If you give us extra information that identifies you, such as your IP address and the time of your visit, we will use it to answer you. Mail you send us does identify you, and we can find, correct and delete it.
You do not have to give us any data, but your IP address is needed for a page to load. We make no automated decisions about you. You may complain to the Polish supervisory authority (Prezes UODO, uodo.gov.pl) or to the authority in your EU country.
For questions about privacy, write to hello@abovetonight.com.
Plain-text version
The same notice is available as a plain-text privacy document. About Above Tonight explains what the site does.