Privacy Policy
Last updated 20 July 2026
We are glad you are visiting Magical Night Sky and thank you for your interest. Below we explain how your personal data is handled when you use this website. Personal data is any data with which you can be personally identified.
1) Controller and contact
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Wusana GmbH i. L., Frobenstr. 26, 10783 Berlin, Germany, e-mail: support@magicalnightsky.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. Full operator details are on the imprint.
This website uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the “https://” prefix and the lock symbol in your browser bar.
2) Your design stays on your device
Magical Night Sky is a browser tool. Everything you enter — place, date, texts, colours — is processed and rendered on your own device, and your poster is generated and downloaded there. Your design and editor preferences are saved in your browser’s local storage so you can continue later. This information stays on your device: it is never transmitted to us, and we cannot see it.
3) Data collected when you visit our website
When using our website for information only — i.e. if you do not send us any information — we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- the page visited
- date and time of access
- amount of data sent, in bytes
- the source/reference from which you reached the page
- the browser used
- the operating system used
- the IP address used
Data processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The website is hosted for us by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, which processes this technical data solely to deliver the pages. See Vercel’s privacy policy.
4) Content delivery network (Cloudflare)
On our website we use a content delivery network (“CDN”) of Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). A content delivery network delivers files (such as images, scripts and other assets) through a network of regionally distributed servers, which helps us to optimise the loading speed of our website. The processing takes place in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the secure and efficient provision of our website. See Cloudflare’s privacy policy.
6) Place search (Mapbox)
When you search for a place in the editor, the text you type is sent through our server to Mapbox, Inc., 1509 16th Street NW, Washington, DC 20036, USA, to look up the matching coordinates. The query is used solely to return matching places and is not stored by us. The processing takes place in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in offering place search. As Mapbox may process the query on servers in the USA, the transfer is safeguarded by the EU Standard Contractual Clauses. See Mapbox’s privacy policy.
7) Web analytics (Cloudflare and Vercel)
To understand how our website is used — for example which pages are visited and how quickly they load — we use Cloudflare Web Analytics, a privacy-friendly analytics service of Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). It is deliberately minimal: it sets no cookies, stores nothing on and reads nothing from your device, does not fingerprint your browser and builds no profile of you across websites. When a page is viewed, a small script reports the page visited, the referring page, the browser and operating system used and the country of origin to Cloudflare. We only ever see aggregated statistics and cannot identify individual visitors.
The processing takes place in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in measuring and improving the use of our website; because nothing is stored on or read from your device, it runs without a consent banner. As Cloudflare may process this data on servers in the USA, the transfer is safeguarded by the EU Standard Contractual Clauses. See Cloudflare’s privacy policy.
In addition we use Vercel Web Analytics, an analytics service of our hosting provider Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). We use it alongside the service above because it also counts page changes that happen without a full page reload, which the measurement above does not capture reliably. It likewise sets no cookies and stores nothing on and reads nothing from your device, and the data is collected through our own domain. With each page view it records the time, the page visited and the referring page, filtered query parameters, an approximate location (country, region and city), and your device type, operating system and browser. In place of a cookie, Vercel derives a hash from the incoming request in order to recognise a visit; it is discarded after 24 hours and is not used to follow you across other websites. We only ever see aggregated statistics and cannot identify individual visitors.
From the same provider we also use Vercel Speed Insights to measure how fast our pages actually perform for real visitors — the poster editor is demanding, and we would rather find out about a slow experience than assume it is fine. It records the route and page called up, the measured performance values (such as how long the page took to become visible and usable) together with the page element they relate to, your network speed, device type, operating system and browser, and your country. It sets no cookies, stores nothing on and reads nothing from your device, and creates no identifier of any kind — the individual measurements cannot be joined into a browsing session or traced back to you.
Both of these processing operations likewise take place in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in measuring and improving the use and performance of our website, and because nothing is stored on or read from your device they too run without a consent banner. As Vercel may process this data on servers in the USA, the transfer is safeguarded by the EU Standard Contractual Clauses. See Vercel’s privacy policy.
Beyond this aggregated measurement, this website uses no advertising and no tracking or profiling. There is no account system and no newsletter, and we hold no customer data about you.
8) Your rights
The applicable data protection law grants you the following comprehensive rights regarding the processing of your personal data:
- the right of access (Art. 15 GDPR)
- the right to rectification (Art. 16 GDPR)
- the right to erasure (Art. 17 GDPR)
- the right to restriction of processing (Art. 18 GDPR)
- the right to be informed (Art. 19 GDPR)
- the right to data portability (Art. 20 GDPR)
- the right to withdraw a given consent (Art. 7 (3) GDPR)
- the right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Right to object: where we process your personal data on the basis of our overriding legitimate interest, you have the right to object to that processing at any time, on grounds arising from your particular situation, with effect for the future. To exercise any of these rights, contact the controller named above.
9) How long we store data
The duration of storage depends on the respective legal basis and the purpose of processing. Server log files are retained only for a short time. Data stored in your browser’s local storage remains on your device until you clear it; the country cookie is a session cookie that expires when you close the browser. Otherwise, stored personal data is deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.