Privacy Policy

Basic principle

SKYWATCH requires no user account and uses no advertising or marketing trackers. Many settings remain solely in the browser. Data that can relate to a person arises mainly when you use a location or actively configure notifications. Only data required for the requested function, secure operation and troubleshooting is processed.

Website access and server logs

When a website is accessed, technically necessary connection data is processed. This may include the IP address, time, requested file or URL, transferred data volume, referrer, browser and device information. Such logs may in particular be generated by the hosting provider. They are used to deliver the website, maintain stability and security and diagnose errors.

Where personal data is involved, the legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the service. The exact retention period for hosting logs depends on the configuration of the hosting service used.

Local storage and PWA cache

SKYWATCH uses localStorage to preserve functions you have selected between visits. This can include location, night mode, filters, language, distance unit, compass correction and other display settings. A random device identifier with a local secret is only created when notification features are used. A service worker may additionally cache SKYWATCH’s own files and previously visited pages for app functionality.

These storage operations support the website and app functions you request. Where Section 25 TDDDG applies, access is based on Section 25(2) no. 2 TDDDG insofar as storage is strictly necessary to provide the digital service expressly requested. SKYWATCH uses no advertising or tracking cookies. You can delete local data and caches at any time through your browser’s site-data settings.

Location, place search and device sensors

You can search for a place manually or, after explicit browser permission, use the device location. Place name, latitude and longitude, elevation and time zone may be processed and stored locally for calculations. Location coordinates are also used server-side to calculate or retrieve the astronomical, weather and place data you request from the providers listed below.

GPS permission is voluntary and controlled by the browser, where it can also be withdrawn. For manual place searches you provide the query yourself. Smartphone orientation sensors are evaluated in the browser for the pointing aid; SKYWATCH does not store their raw data on the server. Where processing is based on your consent, Art. 6(1)(a) GDPR applies; consent can be withdrawn for the future.

External data sources

Most external data requests are made by the SKYWATCH server. The relevant data provider therefore generally receives the SKYWATCH server’s IP address and the parameters required for the specific request, rather than automatically receiving your browser IP. Depending on the function, location coordinates may form part of the request.

Optional external links, such as a Google search or source links, are only opened when you actively click them. From that point, the privacy policy of the destination provider applies.

Notification profile without a user account

When you use notification features, SKYWATCH creates a random device identifier. The server stores, among other things, a verification value derived from the device secret. The alert location, time zone, elevation, selected event types, lead time, enabled channels and your selected language may also be stored so that push and email messages are delivered in the appropriate language. The identifier is used solely to recognise your settings without a conventional user account.

Push notifications

Push messages are only enabled after your explicit browser permission. SKYWATCH stores the subscription created by the browser or push service, including endpoint and cryptographic keys. Your browser or operating system push service is technically involved in delivery and receives the data necessary for that purpose. The legal basis is your consent under Art. 6(1)(a) GDPR. You can disable push in SKYWATCH and revoke browser permission at any time.

Email notifications

Your email address is processed for email alerts. Activation uses double opt-in: the subscription only becomes active after you confirm the link sent by email. Stored data includes in particular the email address, status, confirmation and unsubscribe information and the association with selected alerts. The confirmation link is valid for 24 hours. Every regular alert email contains an unsubscribe option. The legal basis is Art. 6(1)(a) GDPR.

Internal statistics and logs

SKYWATCH’s built-in statistics count total and daily page views. If the hosting environment or an upstream service already supplies a country code, visits may additionally be counted by country. SKYWATCH does not store visitor IP addresses for these own statistics and does not build personal usage profiles.

Limited notification and mail logs are also maintained for reliable delivery and troubleshooting. They may contain device identifier, event, channel, delivery status, technical error messages and, for mail logs, recipient address and subject.

Retention

• Browser data remains on your device until you delete site data or change the relevant setting.
• Inactive device profiles without enabled notifications and without a push subscription are currently cleaned up automatically after 180 days of inactivity.
• Notification logs are currently deleted after 180 days.
• Unconfirmed email subscriptions expire after 24 hours; expired pending entries are subsequently cleaned up automatically.
• The technical mail log is a rolling log limited to the latest 300 entries.
• External responses may be cached server-side for limited periods to improve speed and resilience. Depending on the function, cache keys may contain location coordinates and are cleaned up according to the applicable cache periods.

Where statutory retention or evidence obligations prevent deletion, data is deleted after the relevant period has expired.

Your rights

Subject to the GDPR, you may in particular request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and, where the requirements are met, object to processing (Art. 21). Consent may be withdrawn at any time for the future under Art. 7(3) GDPR. This does not affect the lawfulness of processing carried out before withdrawal.

For privacy requests you can contact contact@13delusions.com. You also have the right to lodge a complaint with a data protection supervisory authority. For a controller based in Hesse, the Hessian Commissioner for Data Protection and Freedom of Information (HBDI) is particularly relevant.

Data security and changes

SKYWATCH uses appropriate technical and organisational measures to protect stored data against unauthorised access, loss or misuse. No internet-based service can guarantee absolute security. This privacy policy will be updated when functions, data flows or legal requirements change materially.