Privacy Policy

When you place an order, we collect: your name, email address, shipping address, and payment information. Payment details are processed entirely by Stripe - we never see or store your full card number.

When you use our site, we collect your GitHub username to generate your atlas. GitHub profile and contribution data is fetched from GitHub's public API. We cache this data temporarily (up to 24 hours) to improve performance. We do not store your GitHub authentication credentials - we only access publicly available data.

We also collect standard web analytics data: pages visited, browser type, and approximate location. This helps us understand how people use the site.

We use your data to: fulfil your print order, send you shipping updates, respond to support requests, and improve the site. That's it.

We do not use your data for advertising. We do not build marketing profiles. We do not sell, rent, or trade your information with third parties for their marketing purposes.

We share your data only with the services required to fulfil your order:

Stripe processes your payment. They receive your name, email, and payment details. Stripe's privacy policy is available at stripe.com/privacy.

Prodigi prints and ships your order. They receive your name, email, shipping address, and the print image file. Prodigi is our print fulfilment partner and a Fine Art Trade Guild approved printer based in the UK. They use your data solely to produce and deliver your print. Prodigi's privacy policy is available at prodigi.com/terms-of-use.

Browserless.io renders your atlas at print resolution. They process the page content temporarily during rendering. No personal data is sent to Browserless - only the atlas design parameters.

Supabase hosts our database and file storage. Your order data and print files are stored securely on Supabase infrastructure.

We do not share your data with anyone else.

Your GitHub contribution data is publicly available via GitHub's API. We fetch and display it to create your atlas. We cache it temporarily for performance. We do not access private repositories, private contributions, or any data that requires authentication. If you have set your GitHub contributions to private, they will not appear in your atlas.

Order data (name, email, address, order details) is retained for as long as necessary to fulfil your order and comply with UK tax and accounting obligations - typically 6 years. Print image files are retained for 60 days after order completion, then deleted. GitHub cache data expires automatically after 24 hours.

Under UK data protection law (UK GDPR), you have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), object to processing, and request data portability.

To exercise any of these rights, email us at support@codexstellarum.com. We will respond within 30 days.

We use essential cookies required for the site to function (e.g. maintaining your session). We do not use advertising cookies or third-party tracking cookies.

We may update this policy from time to time. If we make significant changes, we will update the "last updated" date at the top. We encourage you to review this policy periodically.

For any privacy-related questions or concerns:
support@codexstellarum.com

Keope Labs Ltd (trading as Codex Stellarum)
London, United Kingdom