Privacy Policy
This policy explains how SkyKeepsake (“we”, “us”) uses personal data when you visit skykeepsake.com, buy a star dedication, create an account, or write to us. It is written for people in the European Union and Italy. Last updated: 8 September 2026.
Who is responsible
The controller of the processing described here is the operator of the SkyKeepsake service at skykeepsake.com. You can reach us through the contact form or at hello@skykeepsake.com. We reply in English or Italian.
We do not sell your personal data. We do not run advertising networks or third-party marketing pixels on the public site.
What we collect and why
- Checkout and orders. When you dedicate a star we store the star you chose, the duration, the dedication text, occasion, optional photo, buyer email, recipient name, and optional recipient email. Legal bases: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Art. 6(1)(f)).
- Payment. Paid orders are charged in euro through PayPal. We do not see or store your full card number. PayPal acts as an independent controller for the payment itself. We keep PayPal order and capture identifiers so we can match the payment to your dedication.
- Account. If you register we store email and a hashed password so you can sign in and see dedications tied to you. Basis: contract (Art. 6(1)(b)).
- Public map. After moderation, the dedication (name, message, occasion, optional image) is shown on the sky map and on the star page. That publication is the product you asked for. Do not include other people’s private data in a dedication.
- Messages. The contact form stores name, email, subject and message so we can answer you. Basis: legitimate interest and, where you ask us to do something for you, pre-contractual steps (Art. 6(1)(b) and (f)).
- Technical logs. The server keeps ordinary security logs (IP address, time, URL) for a short period to keep the site running and to investigate abuse. Basis: legitimate interest (Art. 6(1)(f)).
How long we keep data
Order and dedication records stay for as long as the dedication is live, then for the time needed for accounting, disputes and legal claims (in Italy, typically up to ten years for invoices and related records). Account data stays until you ask us to close the account, unless we must keep a subset for those same legal reasons. Contact messages are kept as long as needed to handle the request, then deleted or archived with reduced access. Security logs are rotated on a short cycle (days to a few weeks).
Who else sees the data
- PayPal — payment only, for paid orders.
- Hosting. The site runs on servers in the European Union (Germany). The hosting provider processes data on our instructions.
- Email delivery. Transactional mail (order, publication, password reset) is sent through our mail provider when production mail is configured. Recipients are you, and — if you gave a different recipient email — that person when the star is published.
- We do not give dedications or emails to data brokers.
If a provider is outside the EEA, we rely on an adequacy decision or Standard Contractual Clauses, and we will say so in this policy when that applies.
Your rights
You can ask for access, rectification, erasure, restriction, portability, and you can object to processing based on legitimate interest. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another EU supervisory authority where you live. To exercise rights, use the contact form or hello@skykeepsake.com and include enough detail for us to find your order (email used at checkout and, if you have it, the order number).
Cookies
The public site uses essential cookies and similar storage only. Details are in the Cookie policy. There is no advertising cookie and no analytics cookie today.
Children
SkyKeepsake is not directed at children under 16. If you believe we stored data of a child, contact us and we will delete it.
Changes
If we change this policy in a material way we will update this page and the date above. The current version is always the one published here.