Privacy Policy

When you place an order, we collect: your name, email address, shipping address, and payment information. Payment details are processed entirely by Stripe - we never see or store your full card number.

When you use our site, we collect your GitHub username to generate your atlas. GitHub profile and contribution data is fetched from GitHub's public API. We keep a cached copy to improve performance and refresh it when it is more than a day old. We do not store your GitHub authentication credentials - we only access publicly available data.

If you ask us to email you your chart, we keep your email address, the chart you asked about, and whether you agreed to hear from us again. Every email carries a link to stop further emails.

When you buy a gift card, we keep your name and email address, and, if you ask us to email it to someone, their name, their email address, your message and the date to send it. We use the recipient's details only to deliver the card. They are deleted from the card's record one year after the card expires; the value and the purchase are kept with our accounts.

We also collect standard web analytics data: pages visited, browser type, and approximate location. This helps us understand how people use the site. Analytics are not loaded on order pages or on the pages our systems use to render prints.

We use your data to: fulfil your print order, send you shipping updates, respond to support requests, and improve the site. That's it.

We do not use your data for advertising. We do not build marketing profiles. We do not sell, rent, or trade your information with third parties for their marketing purposes.

We share your data only with the services required to fulfil your order:

Stripe processes your payment. They receive your name, email, and payment details. Stripe's privacy policy is available at stripe.com/privacy.

Prodigi prints and ships your order. They receive your name, email, shipping address, and the print image file. Prodigi is our print fulfilment partner and a Fine Art Trade Guild approved printer based in the UK. They use your data solely to produce and deliver your print. Prodigi's privacy policy is available at prodigi.com/terms-of-use.

Browserless.io renders your atlas at print resolution. They process the page content temporarily during rendering. No personal data is sent to Browserless - only the atlas design parameters.

Supabase hosts our database and file storage. Your order data and print files are stored securely on Supabase infrastructure, on servers in the United States.

Resend sends our emails (order confirmations, shipping updates, gift cards, and charts you ask us to email you). They receive the address each email goes to and the message.

Google Analytics and Umami measure how the site is used. Google Analytics runs without cookies, and Umami does not use cookies.

We do not share your data with anyone else.

Your GitHub contribution data is publicly available via GitHub's API. We fetch and display it to create your atlas. We cache it temporarily for performance. We do not access private repositories, private contributions, or any data that requires authentication. If you have set your GitHub contributions to private, they will not appear in your atlas.

Order data (name, email, address, order details) is retained for as long as necessary to fulfil your order and comply with UK tax and accounting obligations - typically 6 years. Print image files are retained for 60 days after order completion, then deleted. Gift card recipients' names, email addresses and messages are deleted one year after the card expires. GitHub cache data expires automatically after 24 hours.

Under UK data protection law (UK GDPR), you have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal retention requirements), object to processing, and request data portability.

To exercise any of these rights, email us at support@codexstellarum.com. We will respond within 30 days.

We use only what the site needs to work, such as keeping your basket in your browser. Google Analytics runs without cookies. We do not use advertising cookies.

We may update this policy from time to time. If we make significant changes, we will update the "last updated" date at the top. We encourage you to review this policy periodically.

For any privacy-related questions or concerns:
support@codexstellarum.com

Keope Labs Ltd (trading as Codex Stellarum)
London, United Kingdom