Privacy

Last updated: 9 August 2026

The short version: this site collects nothing about you by default. There are no accounts. Three things are optional and entirely up to you — a map pin, a contact message, and the reminder list for the 2027 eclipse — and each is described below. Two things — analytics and affiliate attribution — exist behind a consent banner, and declining them takes exactly one click and breaks nothing.

Who is responsible

This site is operated by the operator of EclipseWhere (eclipsewhere.com), based in Spain. For anything in this policy, including exercising your rights: privacy@eclipsewhere.com.

What is collected, and on what basis

• Nothing, by default. Until you press Accept on the consent banner, no analytics script loads, no analytics or affiliate cookie is set, and outbound shop/booking links carry no tracking identifier.
• Analytics — only with your consent (lawful basis: consent, Art. 6(1)(a) GDPR). If you accept, Google Analytics 4 sets its _ga cookies and we receive aggregate usage data: pages viewed, country-level origin, device type. We use Google Consent Mode v2 with all advertising signals permanently denied; nothing is used for ad targeting. User-level analytics data is retained under Google's default 2-month setting; aggregated statistics persist in reports.
• Affiliate attribution — only with your consent (lawful basis: consent). Some links go to Amazon or Booking.com. With consent, those links carry an affiliate identifier, and when you click one, the destination or its network sets cookies to attribute a purchase to this site. Without consent the same links work, minus the identifier — no attribution happens at all.
• Hosting and security (lawful basis: legitimate interest, Art. 6(1)(f)). Our host processes IP addresses in transit and keeps short-lived operational logs to serve and protect the site, as any host does. We do not receive or store server-side visitor logs ourselves.
• Map pins — only if you submit one (lawful basis: consent by action, Art. 6(1)(a)). The viewing-spot map is entirely optional: you can look up the numbers for any point without submitting anything. If you choose to drop a pin, we store the point you picked rounded to roughly 1 km (full precision never reaches our storage), plus a display name and short note only if you typed them. All of that is public by design — it appears on the shared map for every visitor, so don't put anything in a pin you wouldn't say out loud. We also keep a salted one-way hash of your IP address, used solely for rate-limiting and abuse cleanup; it cannot be reversed into your address and is never displayed. The page never reads your device's location — you click the map or type a search. Typing in the search box sends your query to the public Photon geocoder (komoot.io) to find the place; clicking the map sends nothing anywhere. To have a pin removed, email privacy@eclipsewhere.com with its rough location and note text, and we will delete it.
• The 2027 reminder list — only if you sign up (lawful basis: consent, Art. 6(1)(a)). If you leave an address, we store that address and nothing else that identifies you — no name is asked for, and we do not profile you or track what you open. It sits on our own server (Cloudflare D1), is never sold, rented or shared, and is used for one purpose: a handful of emails about the 2 August 2027 eclipse. Every one of them carries an unsubscribe link, and you can ask us to delete the address at any time — see the contact options below. We also keep a salted one-way hash of your IP briefly, to stop automated sign-up abuse.
• Contact form — only if you write to us (lawful basis: consent by action, Art. 6(1)(a)). The form sends us the email address and message you type, nothing else, and we keep a salted one-way hash of your IP address briefly to rate-limit abuse. Your message reaches us through Brevo (Sendinblue), our email provider, and lands in our inbox; we keep the correspondence as long as needed to deal with it. You never have to use the form — every address on this site is written out in full, so you can write from your own mail client instead.

The third parties, named

• Google Ireland Ltd / Google LLC — Google Analytics 4, consent-gated as above.
• CJ Affiliate (Epsilon International UK Ltd) — the affiliate network behind our Booking.com links. With your consent, clicking a booking link routes through CJ, which sets tracking cookies to attribute the referral. You can refuse those cookies by declining our banner (the link then goes to Booking.com untracked), withdraw consent any time via "Cookie settings" in the footer, and additionally opt out or clear cookies in your browser.
• Amazon (Amazon Associates programme) — equipment links may carry our Associates tag with your consent; Amazon sets its own cookies on its site to attribute purchases. As an Amazon Associate, this site earns from qualifying purchases.
• Booking.com B.V. — the destination of accommodation links; processes your data under its own policy once you're there.
• Cloudflare, Inc. — hosting/CDN; transit processing and operational logs as described above.
• Brevo (Sendinblue SAS, France) — delivers messages sent through the contact form to our inbox. It processes the address and message you typed, for that purpose only.

Each of these processes data under its own privacy policy once you interact with it; this page governs what happens on eclipsewhere.com itself.

Cookies, and how to change your mind

Your consent choice is stored in your browser's localStorage (ew-consent) — that storage itself contains no identifier and tracks nothing. To change or withdraw your choice, use "Cookie settings" in the footer of any page: it forgets the stored choice and asks again, with nothing loading in the meantime. You can also clear this site's data in your browser at any time. Withdrawing consent stops all future analytics and affiliate tagging from this site; cookies already set by third parties can be removed in your browser's cookie settings for those domains.

Your rights

Under the GDPR (and UK GDPR where it applies), you have the right of access, rectification, erasure, restriction of processing, objection, data portability, and the right to withdraw consent at any time without affecting prior processing. To exercise any of them, email privacy@eclipsewhere.com — we will respond within one month. Worth knowing: because this site keeps no accounts and no server-side visitor records, in most cases there is simply nothing held about you to access or erase beyond what your own browser stores.

You also have the right to complain to a supervisory authority. For this Spain-based site that is the AEPD (Agencia Española de Protección de Datos, aepd.es); you may equally contact the data-protection authority of your own country.

Affiliate links

Some pages carry clearly-labelled affiliate links (stays, certified eclipse glasses). They are disclosed next to the links themselves and explained on the affiliate disclosure page. Commission never influences a ranking on this site.