Privacy policy

The short version

You can use Sky Time without an account and without giving us anything. If you make an account we keep your email address, a hashed password, your display preferences and the sky ratings you submit - and nothing else. We do not sell data, we do not run advertising, and there are no analytics or tracking scripts on this site. The app's camera view never sends us anything: what the camera sees stays on your phone, and a picture you choose to save goes to your own photo library and nowhere else. Where the app uses your location it sends as little of it as will do, and much of the work - the stars, the satellites, the copy it keeps for when you are offline - happens on the phone itself. Ask us and we will delete your account.

1. Who we are

Sky Time is a small site, and a pair of phone apps, that predict sunset, sunrise and aurora quality for photographers. This policy covers the website and the Android and iOS apps alike. It is a product of Logical Rich Solutions, LLC, which operates it and is the controller of the personal data described on this page. Questions about anything here can be sent through our contact form, or emailed to contact@skytime.earth.

2. If you just visit

Browsing forecasts, sky photos and location pages requires no account. For visitors we hold only ordinary web server logs kept by our host, which include your IP address, the pages requested and your browser's user-agent string. These are a normal part of running a web server and are used for security and troubleshooting.

There are no advertising cookies, no third-party analytics, no tracking pixels and no social media embeds on this site.

3. If you make an account

We store:

• Your email address, and whether you have confirmed it.
• A hashed password - hashed with a one-way function, so we cannot read it, recover it, or tell you what it is. If you sign in with Google instead, we store no password at all.
• If you use Google sign-in: the account identifier Google gives us, your email address, and your display name. We never receive or ask for your Google password, and we ask Google for nothing beyond your basic profile and email.
• Your preferences - light or dark theme, your home location, and any locations you pin to your dashboard.
• Your sky ratings, including any notes and the time you said the sky looked best, along with when you submitted them.
• Sign-in records - when you last signed in, and, if you tick "remember me", a token and the browser user-agent it was issued to, so you can be signed out of a specific device.

4. Why we hold it, and for how long

The email address exists so you can sign in, so we can confirm the address is yours, and so you can reset a forgotten password. Preferences exist to make the site remember what you chose. Ratings exist because they are the point of the site: they are what the forecast model learns from, which is described in section 6.

Account data is kept while the account exists and is deleted when it is deleted. Confirmation and password-reset links expire on their own - 48 hours and one hour respectively - and are purged after a week. "Remember me" tokens expire after 30 days and are destroyed whenever you sign out or change your password. Server logs are kept by our host on its own schedule.

5. Anti-abuse records

When someone signs up, asks for a password reset or requests a new confirmation link, we briefly record the email address and IP address involved so the same address or machine cannot be used to send large volumes of mail to someone else. These records are deleted after 24 hours and are used for nothing else.

6. How your ratings are used

When you rate how a sky actually looked, that rating is compared against what the model predicted and is used to correct it, both overall and for that specific location. This is the mechanism the site runs on and there is no way to use the rating features without it happening.

Ratings are stored against your account so you can revise your own. Where several people have rated the same event, the site shows a combined figure rather than individual ratings. Administrators can see who submitted which rating, because a rating that nobody is accountable for is not usable as training data.

7. Your location

We never read your device's location unless you explicitly ask us to, by pressing the location control and granting your browser's permission prompt. When you do, the coordinates are used to find nearby forecast locations for that request. They are not stored against your account and not sent to any third party beyond the geocoding lookup described below.

7a. Your camera, in the app

The app has a sky view that shows the camera picture with the Sun, Moon and Milky Way drawn over it, so you can see where they will be. It uses the camera only while that view is open and only after you grant the phone's camera permission. The picture is drawn straight to the screen. It is not recorded, not analysed, and not sent to us or to anyone else - no frame, still or clip ever leaves the device unless you save one yourself, as described next, and we have no way to see what your camera sees. Closing the view stops the camera. You can revoke the permission at any time in your phone's settings; the rest of the app works without it.

Saving a picture. The view has a camera button. When you press it, the app saves one still - what the camera sees at that moment with the sky markings drawn over it - to your phone's own photo library, and only there. Nothing is saved unless you press the button, and nothing is saved anywhere but on your device: the picture is not sent to us, not stored on our servers, not analysed, and not shared with anyone. It is an ordinary photo in your library from then on, under your phone's own rules - you can delete it there, and if you share it, that is you sharing it. On phones that ask, the app requests permission to add to your photo library only at the moment you first press the button. We do not read your photo library; the permission is used to write that one picture.

The same view uses the phone's motion and orientation sensors (the compass, gyroscope and accelerometer) to know which way you are pointing it, and your location, if you allow it, to place the sky correctly. Those readings are used on the device for that purpose alone and are not stored or transmitted.

If you take a photograph with your phone's own camera app while the view is open, that is the phone's camera app and your photo library doing the work, under your phone's own rules - nothing about it comes to us either.

7b. Your location, in the app

The app reads your phone's location only if you allow it, and only to show the sky and the forecast for where you are - on its pages, in the sky view, and in a widget or alerts you have set to "where I am". You can revoke the permission at any time in your phone's settings; the app then works from the places you choose.

What reaches us. When you look at where you are, the app sends us your coordinates rounded to about 100 metres, to answer that request. The widget, the alerts and the offline copy, which refresh on their own a few times a day, send less: the name of the nearest place we already track, if one is within about 20 km, or otherwise your coordinates rounded to about 5 km. If the aircraft layer of the sky view has to come to us (see "Aircraft fetched by your phone" below), it sends your coordinates rounded to about 100 metres; we ask the aircraft source only for the area around a grid square, never your own position. None of these is stored against your account.

Weather fetched by your phone. For a spot we do not track, the app may fetch the weather itself, straight from a public weather service (at present Open-Meteo; this may change), and hand the answer to us to work out the forecast. That service then receives what any website receives - your phone's IP address - and the spot's coordinates, rounded as above, with a couple of points toward the horizon. It receives nothing about your account. Its own privacy policy covers what it does with a request. If that fetch fails, the app asks us instead and we fetch the weather ourselves, as described in section 8.

Aircraft fetched by your phone. With the aircraft layer of the sky view turned on, the app asks adsb.lol, a public network of aircraft receivers, for the aircraft around you, straight from your phone, every ten seconds or so while the view is open. adsb.lol then receives your phone's IP address and a point rounded to about 11 km - never your exact position - and nothing about your account; its own privacy policy covers what it does with a request. If it does not answer, the app asks us instead, as above.

Kept on your phone. So that it opens quickly and still works without a connection, the app keeps recent forecasts, upcoming events, the satellites' orbits and similar answers on your phone, up to a fixed size, and works out the space station's position and the star map on the phone itself. This stays in the app's own storage, is not sent anywhere, and is removed when you clear the app's storage or uninstall it.

8. Who else sees anything

We do not sell personal data and we do not share it for anyone else's marketing. A small number of services necessarily handle it in order for the site to work:

• Resend delivers our email. It receives the address we are writing to and the contents of that message - confirmation links, password resets and similar.
• Google, only if you choose to sign in with Google. That exchange is between you and Google; we receive the profile details listed in section 3.
• Our web host stores the site's database and keeps the server logs in section 2.

We also fetch weather data from Open-Meteo (and, when it is unavailable, MET Norway), space-weather data from NOAA SWPC, camera images through the Windy Webcams API, place names from Open-Meteo's geocoding service, ground heights from AWS's public Terrain Tiles, and aircraft positions from adsb.lol. These are requests the server makes on its own behalf. They carry no information about you, with the single exception of a place name or coordinates when you search for a location or use the location control. The requests the app may make itself, from your phone, are the weather for a spot we do not track and the aircraft around you, both described in section 7b.

We may also disclose information where we are legally required to, or where it is necessary to investigate abuse of the site.

9. Your choices

You can change your email preferences and delete your ratings from your account pages. Ask us through the contact form or at contact@skytime.earth and we will, on request: tell you what we hold about you, correct anything wrong, delete your account and its ratings, or send you a copy of your data. We aim to answer within 30 days and will not charge you for it.

Depending on where you live - for example in the UK, the European Economic Area or California - you may have these rights in law rather than merely as a matter of our policy, including the right to complain to your data protection regulator. We apply them to everyone regardless.

Note that the site is hosted in the United States, so using it means your data is handled there.

10. Cookies, and your choice about them

Every cookie this site sets is strictly necessary, and none is used for tracking. There is no advertising, no analytics, and no third-party tag of any kind.

• A session cookie keeps you signed in while you browse, and disappears when you close your browser.
• A “remember me” cookie, set only if you tick that box, lasting 30 days and holding a random token - not your password or your email. Signing out deletes it.
• A short-lived cookie during Google sign-in, which exists only to check that the reply coming back is the one we sent for, and is deleted the moment sign-in finishes.
• A cookie recording your answer below, holding one word and nothing that identifies you.

Because those are all necessary, the law in most places does not require us to ask permission for them. One thing on the site does deserve asking about: the aurora forecast map comes from NOAA, and your browser fetches it directly, which means a US government server sees your IP address the way it would if you had visited their site. Nothing else on any page is loaded from somewhere else.

So visitors in the UK, the EU and the EEA are shown a bar offering that choice, and nothing is fetched from NOAA until it is answered. Choosing “essentials only” means the map is never requested and the site works exactly as before without it. You can change your mind at any time through Cookie choices in the footer of every page - saying no is as revisitable as saying yes. Whether to show the bar is decided from your browser's own timezone setting, because looking up your location would mean sending your IP address to another company to ask whether you mind your IP address being sent to other companies.

11. Security

The site is served over HTTPS. Passwords are stored only as one-way hashes. Confirmation and reset links are stored hashed as well, so a copy of our database would not yield working links. No system is perfectly secure and we cannot guarantee absolute security, but if a breach affects your data we will tell you.

12. Children

This site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will remove it.

13. Changes

This policy may change. The revised version takes effect when posted here with the date at the top updated. If a change materially affects how we use data you have already given us, we will email account holders rather than relying on you noticing this page.

14. Contact

Privacy questions, data requests and deletion requests go through our contact form or straight to contact@skytime.earth. Both reach the site's operator directly. See also our terms of use and disclaimer.