Privacy Policy — Hilal Vision
Effective date: 1 January 2026
Last updated: 10 September 2026
Data controller: Athrwise Ltd — Contact us
Who we are
Moonsighting.live is operated by Athrwise Ltd, a company registered in England and Wales under company number 17410302, registered office 128 City Road, London, EC1V 2NX, United Kingdom.
Athrwise Ltd is registered with the Information Commissioner's Office under registration reference ZC229634.
Contact: support@moonsighting.live
Athrwise Ltd is the data controller for personal data processed through this Platform.
Introduction
This Privacy Policy describes how Hilal Vision ("we", "us") collects, uses, and protects personal data when you use the Hilal Vision web application or native mobile applications. We operate with a minimal-data philosophy: we collect only what is necessary to provide the service, we never sell your data, and we do not use it for advertising profiling.
1. Information We Collect
Account & Registration
When you create an account (via Clerk), we collect: email address, display name (optional), and OAuth profile picture (optional). Authentication tokens are managed by Clerk and not stored by Hilal Vision directly.
Location Data (Optional)
You may provide GPS coordinates or a city name to compute crescent visibility for your location. Real-time location queries are processed transiently and not stored on our servers, unless attached to a sighting report.
Sighting Reports (Public)
Submitted sighting reports are published publicly and include: your display name, city/country, sighting outcome, observation method, computed q-value, and cloud cover at submission time. Precise GPS coordinates are not stored.
Usage Analytics (Anonymised)
We collect anonymised, aggregated data: pages visited, feature usage, device/browser type, and general region (country-level, not linked to identity). Error reports via Sentry include page URL and error message (anonymised).
Payment Data
Payments are processed by Stripe (web) or Apple/Google (mobile). Hilal Vision receives only a transaction confirmation — no card numbers or banking details are stored by us.
Server Logs
Standard logs (HTTP status codes, anonymised IPs, request paths) are retained for a maximum of 30 days for security and rate-limiting purposes.
2. How We Use Your Information
| Purpose | Legal Basis | Data Used |
|---|---|---|
| Account management | Contract performance | Email, name |
| Crescent visibility computation | Contract performance | Location (transient) |
| Publishing sighting reports | User consent (explicit submission) | Display name, location, outcome |
| Pro subscription management | Contract performance | Stripe transaction confirmation |
| Platform analytics & improvement | Legitimate interest | Anonymised usage data |
| Security & abuse prevention | Legitimate interest | Rate-limit logs, hashed IPs |
We do not use your data for behavioural advertising or data broker services.
3. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Email, name, profile picture |
| Vercel | Hosting & CDN | Anonymised request logs |
| Open-Meteo | Cloud cover & weather | Lat/lng (point query only, no storage) |
| Stripe | Payment processing | Email, subscription status |
| Sentry | Error monitoring | Page URL, error message, browser type |
| Neon (PostgreSQL) | Database | Encrypted accounts, sighting records |
We do not share your data with any third parties beyond those listed above.
4. Data Retention
| Data Type | Retention |
|---|---|
| Account data | Until deletion + 30 days |
| Sighting reports | Indefinitely (public observations) |
| Location queries (real-time) | Not stored |
| Server access logs | 30 days maximum |
| Error logs (Sentry) | 90 days |
| Payment records (Stripe) | 7 years (legal requirement) |
| Anonymised analytics | Aggregated indefinitely |
5. Your Rights
You have the right to access, rectify, erase, port, and restrict processing of your personal data. To exercise any right, submit a request via the Contact page with the subject Privacy Request — [Right]. We will respond within 30 days.
Notes on erasure: Public sighting reports may be retained in attributed/anonymised form. Payment records are retained 7 years per regulation.
EU/EEA users may lodge complaints with their local Data Protection Authority (DPA) if they believe their GDPR rights have been violated.
6. Cookies & Local Storage
| Storage | Purpose | Duration |
|---|---|---|
| Auth cookie (Clerk) | Login session maintenance | Session / persistent |
| localStorage | Language, theme, last location | Persistent (browser-controlled) |
| IndexedDB | Cached visibility grid per date | 7 days |
We use no third-party advertising cookies or tracking pixels.
7. Children's Privacy
Hilal Vision is not directed at children under 13. We do not knowingly collect data from children. If you believe data from a child has been collected, please notify us via the Contact page.
8. Security
- All data in transit is encrypted via TLS 1.2+
- Authentication delegated to Clerk (SOC 2 Type II certified)
- Database encrypted at rest, access IP-allowlisted
- Rate limiting prevents bulk API abuse
- Error monitoring (Sentry) is anonymised before logging
No system is completely secure. We cannot guarantee absolute data security.
9. International Data Transfers
Hilal Vision is hosted on Vercel's global infrastructure (EU and US). EU/EEA users are protected by Standard Contractual Clauses (SCC) and Clerk's GDPR Data Processing Addendum.
10. Changes to This Policy
Material changes are notified via in-app notification and an updated date on this page. Continued use constitutes acceptance.
11. Contact
Email: support@moonsighting.live
Contact page: moonsighting.live/contact
Subject line to include: Privacy — [Your Query]
Response time: Within 30 days