Privacy Policy

Last updated: 2026-08-04

Who we are

My Heliogram (the “Service”) is operated by My Heliogram (operated by Chris Gilly) (“we”, “us”). You can reach us at support@myheliograph.com.

What we collect

Automatically, when you visit

• Server logs: IP address, request path, response status, user-agent string, referrer. Retained for up to 30 days for security + abuse-monitoring purposes.
• Browser storage: we use localStorage to remember UI preferences (master toggle tier, dismissed banners, last-seen build version). No third-party advertising cookies. See “Cookies and similar technologies” below.
• Analytics & error reporting: only with your consent (the “Accept” choice on the cookie banner) we load Sentry (crash/error reporting, no session replay or performance tracing) and, if enabled, Google Analytics 4 (aggregated traffic statistics with IP anonymisation). If you decline, or before you choose, neither service is loaded and operational monitoring relies solely on the server logs described above. Separately, Cloudflare (our hosting provider) runs a cookieless traffic-monitoring beacon at the network level regardless of this choice, as part of operating the site; see Cloudflare Web Analytics.

When you place an order

• Shipping address, payment details, and contact information are collected by Shopify when you check out. We do not store or process payment details on our servers; they go directly to Shopify (PCI-DSS compliant). See Shopify’s privacy policy.
• Printify, our print-on-demand partner, receives your shipping address and the order details necessary to fulfil and ship your product. See Printify’s privacy policy.
• The image you customise is uploaded to Printify so the print can be produced. We retain a copy on our servers for up to 90 days for support + dispute resolution, then delete.

Cookies and similar technologies

We use the following storage:

• Strictly necessary: localStorage entries for UI state (master toggle tier, dismissed modals, current workflow step, your cookie-banner choice). No consent required under GDPR; disclosed for transparency.
• Analytics (consent-only): if you click “Accept” on the cookie banner and Google Analytics 4 is enabled, GA4 sets its usual measurement cookies. Sentry error reporting does not set cookies.

We do not set third-party advertising cookies, and nothing beyond the strictly-necessary storage is set unless you consent. You can change your mind by clearing this site’s data in your browser, which resets the banner.

Where your data goes

• Hosting: Fly.io (United States) and Cloudflare (global content delivery), which process server logs incidental to service operation.
• Shopify: Canada (payments, order management).
• Printify: Latvia / United States (fulfilment).

EU + UK visitors: by using the Service you consent to these international transfers, which rely on the EU–US Data Privacy Framework + Standard Contractual Clauses for processors not certified under it.

Your rights

Depending on where you live (GDPR, UK GDPR, CCPA, CPRA, Quebec Law 25 etc.) you may have the right to:

• Request a copy of the personal information we hold about you
• Request correction or deletion of that information
• Object to or restrict certain processing
• Lodge a complaint with your supervisory authority

To exercise any of these rights, contact support@myheliograph.com. We’ll respond within 30 days.

Children

The Service is not directed at children under 13 (under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

NASA SDO acknowledgement

The solar imagery on this site is derived from NASA / SDO / AIA data and is in the public domain. Use of the imagery does not imply endorsement by NASA or any of its science teams. See “Data credits” in the app footer for the full acknowledgement stack.

Changes to this policy

We’ll post material changes here with a new “Last updated” date and, where required, give you advance notice (email or in-app banner) before changes take effect.