Privacy Policy

The party responsible for processing personal data on this website is:

For questions about data protection and to exercise your rights, contact us at dominikwaluk@gmail.com.

• We only process the data we need to run the website and to sell our digital products.
• We use no analytics or advertising trackers, no social media plugins and no advertising cookies.
• Fonts are served from our own server, not from third parties.
• There is no customer account with a password: you access your purchases through a personal link sent by email.

When you open the website, technical data sent automatically by your browser is processed: IP address, date and time, page requested, referring page, and browser and operating system. This data is needed to deliver the website, keep it secure and fix errors. Our hosting provider stores it in server logs and deletes it after a short period.

Photographs and editorial content are delivered through the content delivery network of our content management system. Your IP address is transmitted to this provider in the process.

When you buy the Digital Calendar or photographs, we process your email address, your name (if provided), the order details (product, price, date, order number, payment status) and your acceptance of the Terms & Conditions and licence terms, including their version. We do this to conclude and fulfil the contract, to provide access and for accounting. The order details are stored with Stripe; we don't keep a customer database of our own.

Payments are processed by Stripe. You enter payment details such as card data directly with Stripe; they never reach us. Depending on the payment method, Stripe also collects your billing address. Stripe processes certain data, for example to prevent fraud, under its own responsibility — see Stripe's privacy policy.

After your purchase you receive a personal access link by email. It is valid for 90 days. When you open it, your device stays signed in for 180 days (cookie, see below). The link and the cookie contain your email address in encrypted form that only our website can read; we don't store them anywhere. Which products you bought is checked with Stripe each time.

Image files you download contain a copyright notice and your order number in their metadata. This protects against misuse and unauthorised sharing. The files are delivered directly from our storage at Cloudflare.

If you request a new access link through the form, we use your email address solely to send you that link — and only if a purchase exists for that address.

We only send emails that belong to your purchase: the confirmation with your access link and, on request, a new access link. We do not send newsletters. We use Resend to send emails.

If you subscribe to the Astronomy Calendar, your calendar app regularly retrieves the dates from our website. Only the technical data described above is processed.

We only use technically necessary and functional cookies — no tracking cookies:

If you install the Digital Calendar on your computer, your browser stores program files and preview images locally so the calendar starts faster and also works offline. This data stays on your device. Signing out deletes stored calendar pages; you can remove everything else by uninstalling the app or clearing the website data in your browser.

Stripe's own cookies and terms apply on Stripe's payment pages.

We use the following service providers, who process data on our behalf:

• Vercel Inc., USA — hosting and delivery of the website. Server functions run in Frankfurt, Germany; static content is delivered through a worldwide network.
• Stripe Payments Europe Ltd., Ireland, and Stripe, LLC, USA — payment processing and keeping the order records.
• Cloudflare, Inc., USA — storage for purchased files (Cloudflare R2), held in Europe. When you download a file, your IP address is transmitted to Cloudflare.
• Resend, Inc., USA — sending emails.
• Sanity AS, Norway — managing and delivering content and images. The data is stored in the EU; delivery uses a worldwide network.

Beyond this, we only disclose data where the law requires it, for example to authorities or for accounting.

Some providers process data in the EU, in Norway or in the USA. According to the Swiss Federal Council, the EU and Norway provide adequate data protection. Vercel, Stripe and Cloudflare are certified under the Swiss-U.S. Data Privacy Framework, which the Federal Council has recognised as adequate since 15 September 2024. With the other providers in the USA, the European Commission's Standard Contractual Clauses apply, supplemented by the adjustments required for Switzerland.

Where the General Data Protection Regulation (GDPR) applies, we rely on the performance of the contract (Art. 6(1)(b) GDPR), on legal obligations such as keeping accounting records (Art. 6(1)(c) GDPR) and on our legitimate interest in operating the website securely and protecting our works from misuse (Art. 6(1)(f) GDPR).

• Server logs: for a short period, as set by the hosting provider.
• Order and accounting data (with Stripe): ten years, as required by the Swiss Code of Obligations (Art. 958f CO).
• Access links are valid for 90 days; sign-ins on a device for 180 days or until you sign out.

You can ask for information about your data, have it corrected or deleted, object to its processing and receive your data in a common format — unless statutory retention obligations prevent this. Write to us at dominikwaluk@gmail.com.

You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU or EEA, with the data protection authority of your country.

The entire website is only available over an encrypted connection (HTTPS). Purchased files are kept in protected storage and are only provided through short-lived, personal links after your access has been checked.

We update this privacy policy when the website or legal requirements change. The version published here applies. See also our Terms & Conditions.