Privacy notice

1. Who is responsible

Email: mail@myapps.fans

This notice covers the EuropeanSpace web app at europeanspace.de, including its English version and redirects from europeanspace.eu and space.myapps.fans. There are no user accounts, analytics or advertising scripts, or embedded social networks. Technical connection data is nevertheless processed when you visit.

2. Hosting, logs and security

The website, its files and its API are provided using Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes information including IP addresses, request times and URLs, browser and device information, and connection and security information to deliver the service, diagnose errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, functioning service.

Technical application logs are sampled. Requested URLs may contain query parameters. Under Cloudflare's current retention rules, Workers Logs are deleted after no more than seven days. Retention of other security data depends on its purpose and legal requirements. Necessary extracts concerning a specific security incident may be kept until it is resolved.

Cloudflare operates globally. Processing outside the EU, particularly in the United States, is possible. Cloudflare relies on the EU–US Data Privacy Framework for US transfers, and its data processing addendum also provides standard contractual clauses for relevant international transfers. See Cloudflare's privacy policy, its data processing addendum and Workers Logs documentation.

The app does not set its own analytics or advertising cookies. Cloudflare may use technically necessary cookies as part of security measures; these are not used for advertising or audience measurement on our behalf.

3. Space data, searches and saved items

Our server centrally retrieves launch and orbital data from Launch Library 2 / The Space Devs and CelesTrak. Mission events, news headlines, calculated spacecraft positions, aurora models and Sentinel preview images are also retrieved centrally from The Space Devs / Spaceflight News API, NASA/JPL, NOAA, Copernicus Data Space / CREODIAS and Earth Search / Element 84 (open Sentinel data). Your browser requests these from our own API. These central requests do not send your visitor data, chosen ISS location or saved items to the data providers. Your device calculates the positions in the 3D orbit view.

Search terms, filters and IDs of saved launches are sent to our API when those functions need them to return results or changes. They may also appear in technical access logs. We do not create an account or a server-side personal interest profile from them. The legal basis is Article 6(1)(f) GDPR: providing the information and saved-item functions you use. The public space database contains launch, status and orbital data; it does not store your ISS observing location.

4. Browser storage and offline use

The browser stores information needed for the functions you choose. Storage technically necessary for functions you expressly request is based on section 25(2), point 2, of the German TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR to provide these functions. Optionally remembering an ISS location is based on your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.

• es-launches and es-missions: IDs of saved launches and mission portraits.
• es-launch-added, es-watch-seen and es-watch-snapshot: when items were saved, the last viewed data state and the latest dashboard snapshot for comparison and connection problems.
• es-mission-seen: your reading progress for reports about saved missions. Saving a mission does not register you for email or push messages. Earlier mission subscriptions are integrated into saved items during app updates.
• es-iss-place: your selected observing location, only when you explicitly choose to remember it.
• Service worker and Cache Storage: app files, language catalogues and the latest supported public data responses for offline use. German and English share saved items on the same domain; we do not add a language cookie or a persistent language-preference entry.

Local entries have no fixed automatic expiry. They remain until you remove them, clear website data or the browser cleans them up. App caches are replaced when the version changes; cached API responses are limited to 40 entries. You can remove saved items in the app, turn off location storage, and clear website data using your browser settings. Clearing website data also removes the offline cache.

When you save a city in the satellite explorer, es-earth-following stores your chosen cities and the last viewed image identifier on your device. New images are compared when you visit; there is no registration, email or push notification. City search filters the existing selection on your device. You can remove a saved city in the explorer. These entries have no fixed expiry and can also be removed by clearing website data.

5. ISS location and optional weather

To calculate possible ISS viewing windows, you can choose a city, enter coordinates or request your browser's geolocation function. The app does not request your location automatically on page load. Browser geolocation requires your consent under Article 6(1)(a) GDPR. You can use a city or manually entered coordinates instead.

The coordinates are used on your device to calculate the orbit and are not sent to our server or the orbital-data provider for that calculation. Your browser or operating system may use its own location services, which have their own privacy information. Without optional location storage, your selected location is used only for the current session.

If you expressly enable weather for your viewing windows, your chosen location is rounded to a 0.5° grid and sent to our weather API. If necessary, our server requests a forecast for that grid cell from MET Norway, the Norwegian Meteorological Institute. Our application does not forward your device's IP address to MET Norway. Rounded coordinates may appear in technical access logs. Forecasts are cached without associating them with a person; weather cells no longer requested are removed from the database after no more than seven days when the next weather request is processed. Your weather selection is not stored permanently. You may disable it at any time for future requests; this does not undo transfers already made. This optional request is based on your consent under Article 6(1)(a) GDPR. See MET Norway's terms.

You can withdraw browser location permission in your browser's website settings. Remove a remembered location using the checkbox or by clearing website data. Withdrawal does not affect the lawfulness of earlier processing.

6. English version and automatic translation

Public German interface and editorial texts are translated into English in the background using Cloudflare Workers AI. The provider is Cloudflare as described above. Translations are stored in Cloudflare Workers KV; the translation namespace is configured for durable storage in the EU. KV data may also be cached outside the EU. The durable-storage setting does not mean that every Cloudflare service, inference operation or connection log is processed only in the EU.

The application sends only the public project texts needed for translation. It does not send visitor IP addresses, observing locations, saved items, search terms, emails or other visitor input to the translation model. It does not call an external translation service from your browser. Normal page requests use stored translations. Legal notices are excluded from automatic translation and publication. The English privacy notice is reviewed separately before publication. The language is determined by the URL, not by a location lookup or automatic redirect.

7. Sharing, links, feeds and calendars

The Share button normally opens your operating system's share sheet. The title, text and link are then passed to the app you choose. Where that is unavailable, the app offers normal links for WhatsApp, Telegram and email, plus Copy link. No scripts or embedded content from those services are loaded just by displaying the buttons.

Only after you choose a target is the prepared text and page link passed to it: wa.me for WhatsApp, t.me for Telegram, or your email app. Sharing an ISS window also includes the displayed place name and observing time. You decide in that service whether to send the message and to whom. The respective provider is responsible for subsequent processing; see the WhatsApp privacy policy and Telegram privacy policy. Copy link writes only the link to your clipboard. The app does not send messages automatically.

Sources and livestreams are external links that open after your click. This also applies to “View this image in full resolution” for satellite images: the link opens the Copernicus Browser of the Copernicus Data Space Ecosystem (browser.dataspace.copernicus.eu) and passes on only the public location and the date of the image; its own terms and privacy notice apply there. Visiting them transfers technically necessary data to their providers. We do not automatically embed videos or external fonts; fonts, logos and space imagery are delivered by our own hosting.

Saving a mission stores your choice and reading progress on your device; new reports are shown when you visit the app. If you additionally subscribe to a mission RSS feed, your reader requests its URL regularly. Those requests generate connection data as described in section 2. A cloud-based reader may process the chosen mission and feed content under its own privacy terms. Copying a feed address uses your clipboard.

Downloading or subscribing to a calendar passes selected launches or day-specific mission milestones to your calendar app. An ISS observing-window calendar additionally contains the selected place name and observing time; its event identifier includes the coordinates rounded to two decimal places. A subscription requests the calendar URL repeatedly. Depending on the calendar service, its servers may request and store the events. Its privacy terms apply to that additional processing. We process the connection data from those requests as described in section 2. The sharing, link and calendar functions you request are based on Article 6(1)(f) GDPR.

8. Email contact

If you email mail@myapps.fans, we process your sender address, message and any contact details or attachments you choose to provide so that we can respond. Providers involved in email transport and mailbox hosting also take part.

The legal basis is Article 6(1)(f) GDPR to handle your enquiry, and additionally Article 6(1)(b) GDPR for contractual enquiries. Messages are deleted when the enquiry has been resolved, unless legal retention duties or the establishment, exercise or defence of legal claims require keeping them.

9. Your rights

Subject to the legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent for future processing. Contact mail@myapps.fans. Data stored only in your browser can be managed and deleted there.

You may complain to a data protection supervisory authority under Article 77 GDPR, particularly where you live or work or where you consider an infringement took place. The authority for the Berlin-based provider is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany. See the authority's contact page or email mailbox@datenschutz-berlin.de.

We do not use automated decision-making with legal or similarly significant effects, or profiling. You are not legally required to use the optional saved-item, location or sharing functions. Without the information needed for a particular function, only that function is limited.