server/src/privacy.ts

 1// Privacy policy for the Moonrise app, linked from its settings and App Store listing.
 2
 3export const PRIVACY_HTML = `<!doctype html>
 4<html lang="en">
 5<head>
 6<meta charset="utf-8">
 7<meta name="viewport" content="width=device-width, initial-scale=1">
 8<title>Moonrise privacy policy</title>
 9<style>
10body { font: 17px/1.55 -apple-system, "Helvetica Neue", Helvetica, Arial, sans-serif; max-width: 40em; margin: 2em auto; padding: 0 1em; color: #111; background: #fafaf7; }
11h1 { font-weight: 500; margin-bottom: 0.2em; }
12h2 { font-weight: 500; font-size: 1.1em; margin-top: 1.8em; border-top: 1px solid #111; padding-top: 0.6em; }
13.rule { width: 48px; height: 5px; background: #e03c31; margin-bottom: 1.5em; }
14@media (prefers-color-scheme: dark) { body { color: #f2f2ee; background: #0b1424; } h2 { border-color: #f2f2ee; } }
15</style>
16</head>
17<body>
18<h1>Moonrise privacy policy</h1>
19<div class="rule"></div>
20<p>Last updated 18 October 2026.</p>
21
22<h2>Summary</h2>
23<p>Moonrise has no accounts, no advertising, no analytics and no tracking. If you turn on aurora alerts or news alerts, it sends our server four things needed to deliver them, described below. Nothing else is collected.</p>
24
25<h2>Location</h2>
26<p>If you allow it, Moonrise uses your location to work out where the Sun, Moon, planets and stars are in your sky. This happens on your device. Your location is not sent to us or to anyone else. You can choose a city instead in Settings.</p>
27
28<h2>Network requests</h2>
29<p>To show live data, the app requests:</p>
30<ul>
31<li>space weather and launch schedules from our server, moonrise-server.audit-labs.workers.dev, which runs on Cloudflare Workers;</li>
32<li>space weather and aurora data directly from NOAA's Space Weather Prediction Center;</li>
33<li>images of the Sun from NASA's Solar Dynamics Observatory;</li>
34<li>images in the Library from NASA, ESA, ESO, NOIRLab and the Library of Congress;</li>
35<li>Deep Space Network status and Mars rover raw images from NASA/JPL;</li>
36<li>space news headlines from the Spaceflight News API, run by The Space Devs.</li>
37</ul>
38<p>These requests contain no identifiers. As with any internet request, the servers receive your IP address. Cloudflare may keep short-lived logs; see Cloudflare's privacy policy.</p>
39
40<h2>Aurora and news alerts</h2>
41<p>Aurora alerts and news alerts are off until you turn them on in Settings. When they are on, the app sends our server:</p>
42<ul>
43<li>this device's push notification token, which Apple issues so a server can send it notifications;</li>
44<li>a 5° band of geomagnetic latitude worked out from your location on the device (for example "50° to 55° north"), not your location itself;</li>
45<li>your time zone offset from UTC, so aurora alerts arrive at night and the news digest at 9 a.m.;</li>
46<li>which of the two alerts you turned on.</li>
47</ul>
48<p>These are stored with the time the device last checked in, and used only to send those alerts. They are not linked to your identity or shared. Turning both alerts off deletes them from the server. A token that Apple reports as no longer valid is deleted automatically.</p>
49
50<h2>Live Activities</h2>
51<p>A launch countdown you add to the Lock Screen runs on your device and sends nothing to our server.</p>
52
53<h2>Changes</h2>
54<p>If this policy changes, the new version will be posted here with a new date.</p>
55</body>
56</html>`;