BIRTHPRINT
Your moment. Your choices.
What stays on your device
Your name and precise birthplace coordinates remain in the current page. Place search sends only the search text and language through our server to Open-Meteo (GeoNames data); birth date, time and your device IP are not forwarded to that provider. We do not request device location. Your chosen language is stored locally.
Public shares
New public shares store the selected scene instant, calculated positions, display settings, date/time labels, reflection and preview image. Names and birthplace labels or coordinates are excluded. Anyone with the link can view and forward it. Shares expire after one year and can be revoked with the separate private management link. Older links retain only the date/time labels originally published; hidden dates are not inferred. Legacy name/place labels are suppressed and previews containing those labels are replaced with a generic image. Downloaded copies and external caches cannot be recalled.
Retention and removal
Aggregate counters cover 90 days; older rows are removed on the next eligible page request or owner report. The coverage record keeps the first and latest recorded minute and the latest observed collection failure. Earlier daily totals remain separate until they expire. Retired optional session records are removed in bounded batches. Revoking a public share removes its stored projection and preview; downloaded copies and external caches cannot be recalled. Short-lived abuse-protection hashes are separate from analytics. Hosting providers OpenAI Sites and Cloudflare process network data for delivery and security under their own policies; the aggregate counters do not remove those responsibilities.
Basic aggregate page counts
Birthprint keeps aggregate counters of eligible public page requests by UTC minute and approved public page, plus successful public-link creations by design. Suspected automated requests are counted separately using a basic User-Agent pattern; raw User-Agent values are not saved. No analytics cookies, visitor identifiers, device profiles, session records, fingerprints or client event beacons are used. Birth details, query strings, IP addresses and referrers are not stored in these counts. Owner requests, recognised tests, prefetches and DNT/GPC requests are excluded where recognised. Explicitly marked test requests can be counted in a separate removable dataset. Reloads count again; restoring a page from browser memory does not. These statistics cannot measure people, sessions, duration, clicks, devices or actual social publication. Old optional session tracking remains retired.
Private administration
Only the owner login sets the necessary Birthprint admin cookie. It is Secure, HttpOnly and SameSite=Strict and expires after two hours; logout revokes it. A random session token is stored as a hash on the server. It is used for access control and to exclude owner traffic, not to follow visitors. Password attempts are throttled separately for security.
Contact and processors
If enabled, the contact form sends your reply address, chosen topic and message to the site operator via the configured email delivery service. Messages are not added to analytics. The website runs on OpenAI Sites with Cloudflare Workers, D1 and R2. A mailbox and verified delivery configuration are required before the form can send.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or objection, and withdraw consent. You may complain to your data-protection authority. Public-share revocation is available immediately through your private management link. The operator’s legal identity and contact address have not yet been supplied; this launch requirement remains unresolved.