Privacy Policy

This is a small, mostly-static site that shows sunrise and sunset times. It's free to use and most pages work without any account. When you do sign in, the site stores the minimum needed to run the features you use.

What we collect

• Your email address, if you sign in. We send a 6-digit sign-in code to it, use it to identify your account, and send any alerts you set up to it.
• Cities you favorite. They're tied to your account so they show up next time you sign in.
• Email alerts you create: the city (with its coordinates and time zone), which sun event or time of day, the days it runs, when it ends, and when it last sent.
• API keys you create. We keep the name you give each key, a short prefix for display, a one-way hash of the key, and when it was created and last used. We never store the key itself.
• Standard request logs (IP address, user agent, referrer, path) kept by our hosting provider for short-term abuse protection and debugging. Retention is typically around 30 days.
• Anonymous page view counts through Simple Analytics, described below.

Your location

If you press Near me, your browser asks for permission and then sends your coordinates, rounded to about 10 meters, to /api/nearby so we can find the closest city. We don't store them, though like any URL they can appear in the request logs above. Nothing location-related happens unless you press the button.

What we don't collect

• No advertising cookies and no third-party ad trackers.
• No passwords. Sign-in uses a one-time code sent to your email, so there's no password to leak.

Who we share it with

We use a small number of third parties to keep the site running. Each one only sees what it needs to do its job:

• Cloudflare hosts the site, routes requests, and delivers our sign-in code and alert emails.
• Convex stores accounts, favorites, alerts, and API keys.
• Simple Analytics counts page views. It sets no cookies and doesn't build profiles of visitors.
• Flickr provides the photos shown on city pages. When you load a city, we ask Flickr for photos near that city's latitude and longitude.

We don't sell data, and we don't share it with anyone outside that list.

Cookies and local storage

Signed-in sessions use a single HTTP cookie to keep you logged in. The site also uses localStorage to remember whether you picked the light or dark theme. Nothing else is stored in your browser.

Your choices

• Sign out at any time from the Account page.
• Stop an alert with the unsubscribe link at the bottom of every alert email.
• Delete your account by emailing us (address below). We'll remove your email, favorites, alerts, and all API keys.
• Request a copy of what we have on you by emailing the same address.

If you're in the EU, UK, or California, you have rights under GDPR, UK GDPR, and CCPA respectively. The request process is the same: email us and we'll handle it.

Children

The service isn't directed at children under 13 and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll delete it.

Changes

If this policy changes in a meaningful way, we'll update the effective date at the top of this page. Small wording tweaks won't bump the date.

Contact

Questions or data requests: hello@sunrisesunset.io.