Privacy Policy
Last updated: March 19, 2026
1.1 Who we are
EclipseChase.is is operated by Elite Consulting, s.r.o., registered in Slovakia ([IČO], [Address]). Contact: privacy@eclipsechase.is. We built this app to help visitors find clear skies for the August 12, 2026 total solar eclipse in Iceland.
1.2 What data we collect
| Data | When collected | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Email address | Signup for notifications | Launch notifications, eclipse updates | Consent (Art. 6(1)(a)) |
| Email address | Pro purchase, Magic Link auth | Purchase confirmation, authentication | Contract performance (Art. 6(1)(b)) |
| Payment data | Pro purchase | Processed entirely by Stripe — we store only email + Stripe session ID | Contract performance (Art. 6(1)(b)) |
| Pro purchase records | Pro purchase | Tax/accounting compliance (Slovak law, 10-year retention) | Legal obligation (Art. 6(1)(c)) |
| Anonymous usage data | Every page visit (if consented) | Umami analytics — page views, referrer, user agent, browser language. No IP addresses stored, no cookies set by Umami | Consent (Art. 6(1)(a)) |
| Device location | Only if user grants GPS permission | Show user's position on the map. Never stored server-side, never transmitted to us | Consent (Art. 6(1)(a)) |
| Server logs (IP, user agent) | Every HTTP request | Collected automatically by Vercel as part of hosting infrastructure. Not accessed or processed by the operator. Governed by Vercel's DPA. | Legitimate interest (Art. 6(1)(f)) |
1.3 Cookies & local storage
| Name | Type | Duration | Purpose | Consent required |
|---|---|---|---|---|
| Supabase auth session | Cookie | Session | Authentication for Pro users via Magic Link | No (strictly necessary) |
eclipsechase-pro | Cookie | 30 days | Caches Pro purchase status for offline access | No (strictly necessary) |
eclipsechase-consent | localStorage | Persistent | Stores user's cookie/analytics consent choice | No (consent mechanism itself) |
| Service Worker cache | Cache API | Varies | Offline access to map tiles, API responses, static pages | No (strictly necessary for PWA) |
Note: Umami analytics does NOT set any cookies. It collects anonymous page view data only if the user consents via our cookie banner.
1.4 Third-party services
| Service | Data shared | Purpose | Privacy policy |
|---|---|---|---|
| Supabase (EU) | Email, auth tokens, purchase records | Database hosting, authentication | supabase.com/privacy |
| Vercel (US, EU CDN) | HTTP requests, IP (in server logs) | Application hosting | vercel.com/legal/privacy-policy |
| Stripe (US) | Email, payment card details | Payment processing for Pro tier | stripe.com/privacy |
| Resend (US) | Email address | Transactional email delivery (welcome email) | resend.com/legal/privacy-policy |
| Mapbox (US) | Tile requests (no personal data) | Map rendering | mapbox.com/legal/privacy |
| Umami Cloud (EU) | Anonymous page views, referrer, user agent | Privacy-friendly analytics (hosted by Umami, cloud.umami.is) | umami.is/privacy |
| PeakFinder (external link) | Coordinates passed in URL (user-initiated) | Horizon obstruction visualization | User navigates to peakfinder.com voluntarily |
1.5 How we use your data
- Email addresses: send launch notifications, eclipse updates, purchase confirmations, and Magic Link authentication emails
- Payment records: fulfill Pro tier access and comply with Slovak tax/accounting requirements
- Analytics: understand which pages are useful, improve the app. No personal data, no profiling
- We never sell, rent, or share personal data with third parties for marketing
1.6 Data retention
- Email signups: retained until user unsubscribes or requests deletion
- Pro purchase records: retained for 10 years (Slovak accounting law requirement)
- Authentication sessions: expire automatically, cleared on logout
- Weather/road data: transient server-side cache, refreshed every 15 minutes, no personal data
- Analytics: aggregated anonymous data, no personal data retained
- Server logs: retained by Vercel per their data processing agreement (typically 30 days). We do not independently store server logs.
1.7 Your rights (GDPR)
Under the General Data Protection Regulation, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Restrict processing of your data
- Object to processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent for analytics at any time (via cookie banner)
- Lodge a complaint with your local data protection authority
To exercise any of these rights, contact us at privacy@eclipsechase.is.
1.8 International data transfers
Your data may be processed by US-based services (Stripe, Resend, Vercel, Mapbox). These providers participate in the EU–US Data Privacy Framework and/or use Standard Contractual Clauses to ensure adequate data protection.
1.9 Changes to this policy
We may update this policy. Material changes will be communicated via the website. The "Last updated" date at the top reflects the most recent revision.