Privacy Policy

About this notice

This notice explains how information is handled when you use Cosmic Post at cosmicpost.lol. It covers our card and collage tools, hosting, and optional analytics.

Dates, names, and the cards you make

We do not require an account, email address, or payment details to make a card. A date lookup sends the chosen date and occasion to our hosting service as part of the page request. A family result or edit URL also contains the names and full birthdays entered in the form.

The optional name added to an individual card is processed in your browser; our card tool does not upload that name or the finished PNG. Family details are processed to render the requested page. We do not maintain an account database or a server gallery of personalized cards. The image mirror stores eligible source astronomy images, not your personalized PNGs.

Family links are readable by anyone who has the address. Names and dates can remain in browser history, shared messages, copied links, and request records. Removing a link from your browser does not erase copies held by recipients or other services. Use nicknames where appropriate and only enter someone else’s details when you are entitled to do so.

Hosting and image delivery

Vercel hosts the website and delivers cached images. As part of operating, securing, and troubleshooting the service, it processes request information such as an IP address, browser information, time, requested URL, and errors. Requested URLs can include the dates and family details described above.

Images normally load through our image delivery route. If an image cannot load there, your browser may request it from the original host, such as NASA or a video thumbnail provider. Viewing embedded video or following a source link can connect you to that provider. Those services receive ordinary network information and apply their own privacy practices.

Our referrer policy limits the referrer sent with requests to the site’s origin rather than the full page URL. This does not remove information contained in a link you deliberately open or share.

Advertising and purchases

Google Analytics, Google AdSense, and affiliate product links are not enabled on the production site as of the date above. We do not process payments, sell personal information, or use entered names and birthdays to target advertisements.

If advertising or another optional tracking service is introduced, we will update this notice and provide the disclosures and consent controls required before activating it. Independent websites you choose to visit have their own policies.

Why we process information

• To produce and deliver the card or collage you request, using the information necessary to provide that service.
• To keep the site secure and available, investigate errors or abuse, and protect users and rights holders, based on legitimate interests where applicable and subject to your rights.
• To collect optional usage analytics when you consent. You can withdraw that choice above without affecting the lawfulness of earlier processing.
• To comply with applicable legal obligations, including data-protection and copyright requirements.

Information is collected electronically through forms, URLs, your browser, and hosting infrastructure. We do not use these details to make automated decisions with legal or similarly significant effects.

Providers and international processing

Information needed to provide the service is handled by our hosting and storage provider, Vercel. Original media hosts and any sharing app you choose may receive information when your browser or device connects to them. Information may also be disclosed where required by law or to address unlawful activity.

Vercel operates international infrastructure, including in the United States. Your information may be processed outside your country. Provider terms and applicable data-protection requirements govern that processing. See Vercel’s Privacy Policy for its practices. This notice does not ask you to waive data-protection rights.

How long information remains

Card personalization and prepared images remain in the page’s browser memory while you use it. Saved images, browser history, shared links, and your privacy preference remain until you or the relevant recipient/service remove them. We cannot delete copies outside our control.

Hosting and security records follow the retention periods applied by Vercel to this deployment. Analytics statistics follow the provider’s retention settings; the 24-hour visitor hash lifespan does not mean all aggregate statistics are deleted after 24 hours.

Your rights and requests

Depending on the law that applies, you may request information about processing and recipients, access to your personal data, correction, deletion, restriction, or portability, and may object to certain processing. Where applicable, you can ask for corrections or deletions to be communicated to recipients and seek a remedy for unlawful processing.

You can change optional analytics at any time using Privacy choices. You may also complain to the data-protection authority with jurisdiction over your situation. These controls and this notice do not limit your statutory rights.

Not having an account does not remove these rights. Clearing browser data affects your device, not hosting records or copies that others hold.

Children and updates

Cosmic Post is intended for adults and people aged 16 or older. A parent or guardian should create cards for younger children and decide which details to enter or share. We do not seek contact details from children.

We update this notice when our practices change. The date above identifies the current notice, and we provide additional notice or choices where required.