Privacy notice

Datenschutzerklärung. Information under Articles 13 and 14 GDPR.

Controller

Ľubomír Eröš, Jarná 65, 082 52 Dulova Ves, Slovakia. Email: lubomir.eros@gmail.com.

Birth data

To rank days for you, Best Day To Ask needs your date of birth, time of birth and place of birth. This is personal data, and it is handled as follows:

• It is sent to our server, used to compute your chart, and included in the response.
• It is not stored — there is no database table holding it, and no file is written.
• It is not written to application logs.
• It is not transmitted to any third party.

Once the response has been sent, the data is gone from our side. If you reload the page it is recalculated from what you type in again. Legal basis: Article 6(1)(b) GDPR — performing the service you asked for.

Place search

When you type a place name, that text alone is sent to Open-Meteo’s geocoding API to obtain coordinates and a time zone. No identifier, cookie or other detail about you accompanies it. If you prefer not to use it, the form lets you enter coordinates and a time zone by hand.

Passes and payment

If you buy a pass, payment is handled entirely by Stripe on Stripe’s own pages. We never see or store your card details.

What we store for a pass is deliberately minimal, and contains nothing personal:

• a randomly generated pass code;
• which plan it is and when it expires;
• the timestamp at which you confirmed immediate access;
• the Stripe checkout session reference, so one payment cannot yield two passes.

There is no email address, name or address in that record — which is also why we cannot look your pass up for you if you lose the code. The pass code is held in a strictly necessary cookie (bdta_pass) so your browser stays unlocked; its lifetime matches the pass. Legal basis: Article 6(1)(b) GDPR. Stripe retains payment records independently for as long as tax law requires.

You can delete the stored pass record at any time from the restore page. That is immediate and irreversible.

Server logs

Our host records technical request data, including IP address, timestamp, requested URL and user agent, to deliver the site and defend against abuse. We do not combine these with anything else or use them to build profiles. Legal basis: Article 6(1)(f) GDPR — legitimate interest in a functioning, secure service.

No analytics or tracking

There is no analytics, no advertising, no social plugins and no cross-site tracking of any kind. The only cookie that is ever set is the pass cookie described above, and only once you have bought a pass.

Processors and recipients

• Netlify (USA / EU) — Hosting and delivery of the website and its serverless functions. Server logs including IP address. Netlify acts as processor under an EU data processing agreement.
• Stripe (Ireland / USA) — Payment processing. Receives the payment data you enter directly on Stripe’s own checkout page. We never see or store your card details.
• Open-Meteo (Germany) — Converting a place name into coordinates and a time zone. Receives only the place name you type. No identifier and nothing else about you is sent.

Transfers outside the EU

Netlify and Stripe may process data in the United States. Both are engaged under contractual arrangements based on the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework.

Your rights

Under the GDPR you may request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and object to processing (Art. 21). You may also lodge a complaint with a supervisory authority.

Please note honestly what this means here: because we hold no identifying data, we usually have nothing to give you in response to an access request. The one exception is a pass record, which you can inspect and delete yourself with your pass code.

Changes

This notice will be updated as the service changes. The date below reflects the current version.

Last updated: 2026-09-07