ExoAtlas

Privacy policy

Datenschutzerklärung

In short

  • No cookies, and nothing is stored in your browser.
  • No statistics, no tracking, no advertising.
  • No accounts, no forms, no newsletter.
  • Nothing is loaded from other companies: fonts, images and maps come from this server.

The only personal data this website handles is what every web server needs in order to answer a request, above all your IP address.

Who is responsible

Responsible for the processing of data on this website (the controller under the GDPR):

Tom HellingQueiser Straße 1106188 LandsbergGermany

E-mail: TomHelling.DevTech@gmail.com

When you open a page

Your browser sends a request to the server, and the server needs your IP address to send the answer back. The server writes a log entry for the request with:

  • the IP address,
  • date and time,
  • the address of the page or file that was asked for,
  • the page the request came from, if your browser tells,
  • the name and version of your browser and operating system, as your browser tells them.

The log is needed to keep the website running and to notice attacks and errors. That is a legitimate interest, and the legal basis is Art. 6 (1) (f) GDPR. The entries are not combined with other data and are not used to find out who you are. They are kept only as long as this purpose needs them and are deleted after that.

The connection is encrypted (HTTPS), so nobody on the way can read what is sent.

The website runs on servers of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The company receives the data named above because it delivers the pages, and handles it under its own privacy policy. Passing the data on rests on the same legitimate interest: without a host, the website cannot be reached.

The data may also be processed outside the European Union. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

You do not have to provide this data by law or by contract. Without the IP address, however, the server cannot send you the page.

When you search

What you type into a search or filter field is sent to the server, which looks it up in the catalogue of planets and stars. The search field does this already while you type, to show suggestions. The text is part of the address of the request, for example /search?q=kepler, so it appears in the log entry described above. It is not stored anywhere else and is not linked to you.

The 3D models and the map

The turning planets, the 3D models and the map of the Milky Way are drawn by your own device. For that the website asks your browser whether it can draw 3D graphics. Nothing about your device is sent to the server.

Links to other websites

This website links to other websites, for example the NASA Exoplanet Archive. Data reaches them only when you follow such a link. From then on their own privacy policies apply.

When you write an e-mail

If you write to the address above, your e-mail address and your message are used to answer you, on the basis of Art. 6 (1) (f) GDPR: the legitimate interest is to answer what you asked. They are deleted once the matter is settled, unless the law requires them to be kept.

E-mails to this address are received and stored by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

No automated decisions

This website makes no decisions about you by automated means and creates no profiles (Art. 22 GDPR).

Your rights

Regarding your personal data you have the right to

  • learn which data is processed (Art. 15 GDPR),
  • have wrong data corrected (Art. 16 GDPR),
  • have data deleted (Art. 17 GDPR),
  • have the processing restricted (Art. 18 GDPR),
  • receive data that you provided in a common, machine-readable format, where the processing rests on consent or a contract (Art. 20 GDPR; on this website that is not the case),
  • object to the processing, see the next section (Art. 21 GDPR),
  • complain to a data protection authority, for example the one where you live (Art. 77 GDPR).

To use these rights, an e-mail to the address above is enough.

Your right to object

All processing described here rests on a legitimate interest (Art. 6 (1) (f) GDPR). You may object to it at any time, for reasons that arise from your particular situation (Art. 21 (1) GDPR). The data is then no longer processed, unless there are compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. An e-mail to the address above is enough.

Changes

This policy describes the website as it is now. When the website changes, the policy changes with it. Last changed in November 2026.