Privacy Policy

Last updated: 2026-05-28

Who we are

My Heliograph (the “Service”) is operated by My Heliograph (operated by Chris Gilly) (“we”, “us”). You can reach us at gillygumption@gmail.com.

What we collect

Automatically, when you visit

• Server logs: IP address, request path, response status, user-agent string, referrer. Retained for up to 30 days for security + abuse-monitoring purposes.
• Browser storage: we use localStorage to remember UI preferences (master toggle tier, dismissed banners, last-seen build version). No third-party advertising cookies. See “Cookies and similar technologies” below.
• Analytics & error reporting: we do not currently use third-party analytics (such as Google Analytics) or third-party error-reporting services. Operational monitoring relies solely on the server logs described above.

When you place an order

• Shipping address, payment details, and contact information are collected by Shopify when you check out. We do not store or process payment details on our servers; they go directly to Shopify (PCI-DSS compliant). See Shopify’s privacy policy.
• Printify, our print-on-demand partner, receives your shipping address and the order details necessary to fulfil and ship your product. See Printify’s privacy policy.
• The image you customise is uploaded to Printify so the print can be produced. We retain a copy on our servers for up to 90 days for support + dispute resolution, then delete.

Cookies and similar technologies

We use the following storage:

• Strictly necessary: localStorage entries for UI state (master toggle tier, dismissed modals, current workflow step). No consent required under GDPR; disclosed for transparency.

We do not set analytics or third-party advertising cookies. You can clear the browser storage above via your browser’s site-data controls.

Where your data goes

• Hosting: Render (US-East), which processes server logs incidental to service operation.
• Shopify: Canada (payments, order management).
• Printify: Latvia / United States (fulfilment).

EU + UK visitors: by using the Service you consent to these international transfers, which rely on the EU–US Data Privacy Framework + Standard Contractual Clauses for processors not certified under it.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA, CPRA, Quebec Law 25 etc.) you may have the right to:

• Request a copy of the personal information we hold about you
• Request correction or deletion of that information
• Object to or restrict certain processing
• Lodge a complaint with your supervisory authority

To exercise any of these rights, contact gillygumption@gmail.com. We’ll respond within 30 days.

Children

The Service is not directed at children under 13 (under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

NASA SDO acknowledgement

The solar imagery on this site is derived from NASA / SDO / AIA data and is in the public domain. Use of the imagery does not imply endorsement by NASA or any of its science teams. See “Data credits” in the app footer for the full acknowledgement stack.

Changes to this policy

We’ll post material changes here with a new “Last updated” date and, where required, give you advance notice (email or in-app banner) before changes take effect.