Astralis FR Open the app

Legal notice

Astralis is a free, non-commercial personal project published by WHLBR. Contact: photon@astralis-app.org.

The service

Astralis is provided as is, with no guarantee of availability or accuracy. Its calculations (exposures, scoring, weather, seeing) are decision aids: in the field, your judgment comes first. The service may change at any time. Report a bug to photon@astralis-app.org.

Intellectual property

The interface, texts and original content of astralis-app.org are protected by copyright (© 2026 WHLBR). Third-party data belongs to its authors and is used under its licenses (see Credits & licenses).

Hosting

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (cloudflare.com).

Your data and why

  • Your account (username, email, hashed password, gear, sites, preferences): needed to provide the service (contract, GDPR art. 6.1.b). An email address is required to create an account. It confirms your sign-up, resets your password and, rarely, warns you of an incident or a major change.
  • The Astralis newsletter: only if you tick the box (unticked by default) or turn it on in Settings > Account (consent, GDPR art. 6.1.a). For ages 15 and over. Unsubscribe in one click, in the app or at the bottom of each email.
  • Security and operation (anti-bot check, anonymous statistics, error reports, weather and place names for your sites): legitimate interest in protecting the service and keeping it running (GDPR art. 6.1.f).

How it is protected

  • Your password is never stored in plain text. Your site coordinates, email and Meteoblue key are encrypted with a key of your own.
  • Your data is never sold, rented or shared, and is never used for advertising.
  • Without an account, the app loads a demo profile that stays on your device. If you use geolocation, your coordinates are sent to Nominatim (place name) and Open-Meteo (weather for the site).
  • When a bug occurs, the browser may send the server the error message and its stack trace, the page address and the browser in use; the server adds your IP address. These reports are used to fix the problem, and Astralis does not store them. Session tokens are masked in them.

Services that receive data

  • Cloudflare: hosting of the app and the data (accounts, profiles, photos, backup copy), cookieless anonymous audience measurement (Cloudflare Web Analytics), and Turnstile, which checks at sign-up and on the contact form that a human fills it in (browser signals and IP address, no advertising cookie).
  • Brevo (French company, processor under GDPR art. 28): sends service emails, contact form messages (your address, your message and, if you tick the box, the app version and your browser), and the newsletter if you asked for it. Your email and username stay there while you are subscribed; they are erased when the address leaves your account (change, account deletion). Brevo counts email opens and clicks, which cannot be turned off.
  • Open-Meteo and 7Timer: weather forecasts for your sites' coordinates.
  • Meteoblue: seeing, only if you entered your own key.
  • OpenStreetMap / Nominatim: place name, when you use geolocation.
  • CDS (University of Strasbourg): sky images, only if our tile server is unavailable (your IP address and the area of sky viewed).
  • Google Drive: a backup copy, encrypted before upload (unreadable by Google).

Transfers outside the European Union

Cloudflare and Google (encrypted backup copy) are US companies. Transfers to the United States are covered by the European Commission's standard contractual clauses and the EU-US Data Privacy Framework; details of these safeguards are sent on request to photon@astralis-app.org. Brevo hosts its data in the European Union.

Cookies and storage on your device

Astralis uses a single cookie, your session cookie (HttpOnly, secure, SameSite=Strict), valid for 7 days. It is required for the service and exempt from consent (art. 82 of the French Data Protection Act). The app also keeps your settings and a copy of your profile on your device (local storage) so it works offline. No advertising or tracking cookies.

Retention

  • Your account and its data are kept while you use it, and deleted after 12 months without signing in.
  • A sign-up that is never confirmed is erased after 30 days.
  • Encrypted backups are kept 30 days (daily) and 13 months (monthly), then destroyed. Data deleted from your account therefore also leaves the backups after that period.

Your rights

You can view, correct, export (JSON file) and delete your data from Settings > Account. To object to processing or ask for its restriction, write to photon@astralis-app.org. Withdrawing your consent to the newsletter does not affect past mailings. If you believe your rights are not respected, you can complain to the CNIL, the French data protection authority (3 place de Fontenoy, 75007 Paris).

Discover Astralis