Privacy policy

1. Data controller

Raúl Martín Martín. Contact: info@foreverinthesky.com

2. What data we process and why

a) Your star. When you create a star we store: the signature (alias) you choose, the message you write (up to 150 characters), the color, the region, the assigned coordinates, the creation date, a verification code (hash), a private edit code, a device identifier (see 2e) and the date you download the PDF. They let us show your star in the sky, make it searchable, generate your PDF certificate and let you manage it. The signature, message, color, region, coordinates, date and verification code are public; the edit code and the device identifier are not. Do not put personal data you don't want public in your signature or in your message. Your PDF contains the private edit code: anyone who has it can edit your star, so keep it safe. Legal basis: providing the service you request and your consent when submitting the content (Art. 6(1)(a) and 6(1)(b) GDPR).

b) IP hash (anti-abuse limit). To prevent spam and automation, we limit the number of stars per IP and time period. We do not store your IP in clear in our database: we store a pseudonym (hash) derived from it using a keyed hash function (HMAC-SHA-256); IPv6 addresses are grouped by /64 block. Legal basis: legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR). This hash is automatically deleted after 48 hours.

c) Anti-bot check (Cloudflare Turnstile). When you create a star, Cloudflare analyses technical data from your browser to tell people from bots. Cloudflare processes that data under its own privacy policy. When verifying, our server also sends your IP address to Cloudflare.

d) Infrastructure and security. The site is served through Cloudflare (DNS, CDN and protection). Our server logs technical data for each request (IP, date, full URL including its parameters, referring page and browser) for security and operation, for about 10 days. Legal basis: legitimate interest in the security of the service.

e) Cookie and local storage. We use a single technical cookie, sky_device_id (random identifier, lasting about 1 year), which is set when you create a star. It is used to limit to 1 star per device every 7 days and to recognize you as the creator of your star (for example, when downloading the PDF). It is stored together with your star. We do not use it for advertising, analytics or tracking. We also save your language in your browser's local storage (sky_lang) only if you choose it manually. We use no tracking or analytics cookies.

f) Sharing links. Links shared on social networks may include UTM parameters to tell which network a visit came from. They do not identify individuals.

g) Email. If you write to info@foreverinthesky.com, we process your email address and message to reply, and keep them as long as needed to handle your request.

3. Recipients and international transfers

Our providers are Cloudflare, Inc. (DNS, CDN, protection, Turnstile and email forwarding), Google (email management) and a server hosting provider. Some are based in the US; transfers rely on the safeguards they offer (for example, standard contractual clauses or the EU-US Data Privacy Framework). We do not sell your data.

4. Retention

• Stars and their device identifier: while the star exists or until you request its removal.
• IP hash: 48 hours.
• Server logs: about 10 days.
• Content reports: as long as needed to handle them.
• Emails: as long as needed to handle your request.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@foreverinthesky.com. You can edit your star's signature and message from 'Manage your star' with your edit code, and you can ask for your star to be removed. To show it is yours, include its signature and the edit code from your PDF. Where processing is based on your consent, you can withdraw it at any time (for example, by asking for your star to be removed), without affecting the lawfulness of processing before withdrawal. If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (www.aepd.es).

6. Unlawful content

If you find a signature that is unlawful or infringes your rights, email info@foreverinthesky.com with the signature; after verification we will remove it. Reports do not store any data about the person reporting.

7. Children

The service is not aimed at children under 14 and we do not knowingly collect their data.

8. Changes

We may update this policy; the date above shows the latest version.