Cosmic Post · cosmicpost.lol
Privacy Policy
You can make a card without an account. Here is what still passes through your browser and our services, and the choices you have.
Last updated: October 18, 2026
Contact: support@hellobasalt.dev for support and privacy requests, hello@hellobasalt.dev for everything else.
Who we are
Cosmic Post at cosmicpost.lol is operated by Basalt (hellobasalt.dev), an independent software studio. Basalt decides why and how information is handled on this site and is the controller of the information described here. Contact us at support@hellobasalt.dev.
This notice explains how information is handled when you use Cosmic Post. It covers our card and collage tools, hosting, NASA archive data and images, and analytics.
Dates, names, and the cards you make
We do not require an account, email address, or payment details to make a card. A date lookup sends the chosen date and occasion to our hosting service as part of the page request. A family result or edit URL also contains the names and full birthdays entered in the form.
The optional name added to an individual card is processed in your browser; our card tool does not upload that name or the finished PNG. Family details are processed to render the requested page. We do not maintain an account database or a server gallery of personalized cards. The image mirror stores eligible source astronomy images, not your personalized PNGs.
Family links are readable by anyone who has the address. Names and dates can remain in browser history, shared messages, copied links, and request records. Removing a link from your browser does not erase copies held by recipients or other services. Use nicknames where appropriate and only enter someone else’s details when you are entitled to do so.
Hosting and image delivery
Cloudflare hosts the website and delivers cached images. As part of operating, securing, and troubleshooting the service, it processes request information such as an IP address, browser information, time, requested URL, and errors. Requested URLs can include the dates and family details described above. Cloudflare Web Analytics also counts page loads for us without cookies, using a small script and request information Cloudflare already handles; it is part of hosting and runs whatever you choose below.
The dates, titles, credits and explanations that Cosmic Post matches to your date come from NASA’s Astronomy Picture of the Day (APOD) archive. A copy of that archive data is stored with the site and refreshed daily, so choosing a date does not send it to NASA. Image files are fetched from NASA and other archive hosts by our servers and delivered through our own address, and Cloudflare may cache copies so they load faster. Those requests contain the image address, not your name or date. For rate limiting, our servers briefly keep a count of image requests per IP address in memory.
Images normally load through our image delivery route. If an image cannot load there, your browser may request it from the original host, such as NASA or a video thumbnail provider. Viewing embedded video or following a source link can connect you to that provider. Those services receive ordinary network information and apply their own privacy practices.
Our referrer policy limits the referrer sent with requests to the site’s origin rather than the full page URL. This does not remove information contained in a link you deliberately open or share.
Optional analytics and your choice
Our own visit count runs by default unless you decline. Each page view sends our server the general page path (individual birthday pages are grouped as one path) and the referring site’s address without its path. Cloudflare adds an approximate country. Declining stops future collection in this browser, including on later visits while the choice remains saved; it does not remove counts already sent. Action events such as selecting an occasion or generating a card require acceptance. These counts use no cookies and no visitor identifier, and we store no IP address with them.
We remove query strings and fragments from analytics page URLs and replace individual birthday paths with a general result path. Our event properties describe the flow or member count, not entered names or full dates. Essential hosting and security processing continues whether you accept or decline analytics.
Cosmic Post does not set cookies of its own. Your accepted or declined choice is stored in this browser’s local storage under the key “cookie-consent” until you change it or clear site data. No optional analytics choice is required to make, save, or share a card. Visit counts and action events are stored in Cloudflare Workers Analytics Engine on our Cloudflare account.
Visit analytics: off. Action analytics: off.
Basic visit counts start automatically unless you decline. Declining stops future collection; it does not remove visits already counted. Change your choice at any time. Turning analytics off reloads the page to stop scripts that have already loaded. Your choice applies to this browser on cosmicpost.lol.
Advertising and other tracking
As of the date above, Cosmic Post shows no advertising and no affiliate links, and Google Analytics and Google AdSense are not enabled. We do not take payments, sell personal information, or use entered names and birthdays to target advertisements.
If advertising or another optional tracking service is introduced, we will update this notice and provide the disclosures and consent controls required before activating it. Independent websites you choose to visit have their own policies.
Why we process information
- To produce and deliver the card or collage you request, using the information necessary to provide that service.
- To keep the site secure and available, investigate errors or abuse, and protect users and rights holders, based on legitimate interests where applicable and subject to your rights.
- To understand site usage through basic visit statistics, which you can turn off above. Action analytics run only when you accept, and you can withdraw that choice at any time.
- To comply with applicable legal obligations, including data-protection and copyright requirements.
Information is collected electronically through forms, URLs, your browser, and hosting infrastructure. We do not use these details to make automated decisions with legal or similarly significant effects.
Providers and international processing
Information needed to provide the service is handled by our hosting and analytics provider, Cloudflare (hosting, image caching, Web Analytics and the storage for our own visit counts and action events). Original media hosts and any sharing app you choose may receive information when your browser or device connects to them. Information may also be disclosed where required by law or to address unlawful activity.
Cloudflare operates international infrastructure, including in the United States. Your information may be processed outside your country. Provider terms and applicable data-protection requirements govern that processing. See Cloudflare’s Privacy Policy for its practices. This notice does not ask you to waive data-protection rights.
How long information remains
Card personalization and prepared images remain in the page’s browser memory while you use it. Saved images, browser history, shared links, and your privacy preference remain until you or the relevant recipient/service remove them. We cannot delete copies outside our control.
Hosting and security records follow the retention periods Cloudflare applies to this site. Cached images contain public astronomy images only. Our visit counts and action events are kept for up to three months, the retention Cloudflare applies to Analytics Engine data.
Your rights and requests
Depending on the law that applies, you may request information about processing and recipients, access to your personal data, correction, deletion, restriction, or portability, and may object to certain processing. Where applicable, you can ask for corrections or deletions to be communicated to recipients and seek a remedy for unlawful processing.
Send requests to support@hellobasalt.dev. We may ask for details that help us find the information concerned, such as a family link you shared.
You can change optional analytics at any time using Privacy choices. You may also complain to the data-protection authority with jurisdiction over your situation. These controls and this notice do not limit your statutory rights.
Not having an account does not remove these rights. Clearing browser data affects your device, not hosting records or copies that others hold.
Children and updates
Cosmic Post is intended for adults and people aged 16 or older. A parent or guardian should create cards for younger children and decide which details to enter or share. We do not seek contact details from children.
We update this notice when our practices change. The date above identifies the current notice, and we provide additional notice or choices where required.