ISS SkyTransit is an application that allows you to calculate and visualize the transits of the International Space Station (ISS) in front of the Sun and Moon from your geographic location.
This privacy policy describes how we collect, use, and protect your information when you use our application.
📋 Table of Contents
📍1. Information We Collect
1.1 Location Data
The application collects and processes the following data provided by the user:
- Latitude and longitude: to determine your observation position
- Altitude: to refine astronomical calculations
1.2 Technical Data
We automatically collect:
- IP Address: temporarily recorded in server logs for security and debugging purposes
- Date and time of requests: for rate limiting management and security
- API request type: for monitoring and service improvement
These logs are kept for a limited time (maximum 30 days) and are used only for maintenance and security purposes.
1.3 Data We DO NOT Collect
- ✅ No personally identifiable information (name, email, phone, etc.)
- ✅ No user accounts are created
- ✅ No location history is kept
- ✅ No browsing or usage data is tracked
- ✅ No tracking cookies are used
🎯2. How We Use Your Information
The location data you provide is used exclusively to:
- Calculate ISS transits in front of the Sun and Moon for your position
- Determine the optimal centerline for observation
- Generate observation times and angles
🔗3. Sharing Data with Third Parties
3.1 External APIs Used
To provide our services, we use the following public APIs:
🛰️ CelesTrak (NORAD)
Entity: Center for Space Standards & Innovation (CSSI)
Location: United States
Use: ISS orbital data (TLE)
Data shared: No user data
🌐 N2YO API
Entity: N2YO.com
Location: United States
Use: TLE data (backup)
Data shared: No user data
🌙 NASA JPL
Entity: Jet Propulsion Laboratory
Location: United States
Use: Sun/Moon positions
Data shared: No user data
3.2 No Commercial Sharing
✅ We do not sell, trade, or rent your location data or any other information to third parties.
We do not share your data with any third parties for marketing or advertising purposes.
🔒4. Data Security
We take the security of your data seriously and implement several protection measures:
4.1 Technical Measures
- HTTPS Encryption: All communications between the app and server are encrypted
- JWT Authentication: Secure access tokens with automatic expiration
- Rate limiting: Protection against abuse and DDoS attacks
- Security headers: X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, HSTS
4.2 Data Minimization
- Location data is never stored on the server
- Calculations are performed in memory and results returned immediately
- No user database is maintained
🔐5. Application Permissions
5.1 Required Permissions
The application may request the following permissions on your device:
- Location: To automatically obtain your GPS position (optional - you can manually enter your coordinates)
- Internet: Required to communicate with the calculation server
- Network access: Required to check connectivity
👶6. Children's Data
Our application does not specifically target children under 13 years of age. We do not knowingly collect personal information from children under 13.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete such information.
⏱️7. Data Retention
📍 Location Data
Retention: 0 days
Used only for immediate calculation then deleted
📝 Server Logs
Retention: Maximum 30 days
IP address, date/time, request type
Automatic deletion
🛰️ TLE Cache
Retention: 15 minutes
Public ISS orbital data
No user data
⚖️8. Your Rights
We do not store any personal data persistently, except for temporary technical logs described in section 1.2 (IP address, kept for a maximum of 30 days).
Your location data is never recorded. There is therefore no location history to consult, modify or delete.
In accordance with GDPR, you have the following rights:
- Right of access: You can request access to logs containing your IP address
- Right to rectification: Not applicable (no personal data stored)
- Right to erasure: Logs are automatically deleted after maximum 30 days
- Right to restriction of processing: You can stop using the application at any time
- Right to object: You can object to processing by uninstalling the application
📢9. Advertising and Monetization
🎉 The ISS SkyTransit application contains no advertising.
We do not work with any advertising network and do not use any third-party tracking or analytics SDKs.
🇪🇺11. Legal Compliance and GDPR
11.1 Data Controller
- Controller: Florian
- Contact: lightstram.astro@gmail.com
- Location: France
11.2 Legal Basis for Processing (GDPR)
In accordance with Article 6(1) of GDPR, the processing of your data is based on the following legal bases:
- Location data: Performance of service requested by the user (Article 6(1)(b) - necessary for contract performance)
- Server logs (IP): Legitimate interest for security and proper operation of the service (Article 6(1)(f))
11.3 Data Transfers Outside the EU
The third-party APIs we use (CelesTrak, N2YO, NASA JPL) are located in the United States. However:
- No personally identifiable data is transferred to these services
- Only public orbital data (non-personal) is exchanged
- Your location data remains processed on our server and is never transmitted to these third parties
11.4 Data Hosting
- Server location: Google Cloud europe-west9, Paris, France
- Type of processing: In-memory processing only (no persistent storage of location data)
- Server logs: Kept for maximum 30 days on the main server
📊 Simple Summary
What we collect:
- 📍 Your geographic location (only when you perform a search)
What we DO NOT do:
- ❌ We do NOT store your location
- ❌ We do NOT create user accounts
- ❌ We do NOT sell your data
- ❌ We do NOT display advertisements
- ❌ We do NOT track your usage
Data usage:
- ✅ Real-time astronomical calculations only
- ✅ Immediate deletion after processing
- ✅ Encrypted communications (HTTPS)
- ✅ No commercial sharing
🔐 Your privacy is our priority.
📧 Need to contact us?
If you have any questions or concerns about this privacy policy or our data practices, we are at your disposal:
Email: lightstram.astro@gmail.com
Developer: Florian