Privacy Policy
Last updated: October 4, 2026
Celebrari (celebrari.love) is a shared-memory service: the Common Sky is free, and a creator can buy a Private Sky for one moment. Guests take part through their phone browser by leaving messages, photos or voice notes. The service is operated by Celebrari, which is the data controller for the personal data described here. Questions or requests: hello@celebrari.love.
Two roles matter below: the creator (who buys and controls a Private Sky) and guests (who take part). The creator decides who receives the link and is responsible for telling people that sky messages and attached media are visible to people with access.
Creator details
Your email, sky name, optional close date, occasion and chosen package. We use these to create your sky, send your links, tailor prompts, send lifecycle emails (see Section 3), and provide support. Legal basis: performance of our contract with you.
Payment details
Payments are handled by Lemon Squeezy as merchant of record. We never see your card number or full billing details - we receive an order confirmation and limited details (your email and an order reference). Legal basis: performance of our contract and our legal obligation to keep transaction records.
Private sky controls
A creator receives a private link and control links used to moderate contributions, open the live view and manage media. These are capability links rather than accounts. Legal basis: performance of our contract with the creator.
Guest messages and names
The message a guest writes (5-500 characters) and an optional signature. Messages become stars visible to people viewing that sky; the write screen says so before posting. Legal basis: our legitimate interest in providing the service the creator purchased, supported by the guest’s voluntary submission after notice.
Photos, videos, and voice notes
Guests may attach a photo or voice note up to 30 seconds to their star (visible within the sky), and may send original photos and videos privately to the creator (never shown publicly; stored so the creator can review and download them). We strip photo metadata such as GPS location before display. Legal basis: performance of our contract with the creator and the guest’s voluntary submission after notice.
Mentions of other people
Messages may name the people a sky celebrates and other guests. Legal basis: our legitimate interest in operating the service. Anyone named can ask us to remove a star (see Section 7).
IP addresses and device identifiers
Used for rate limiting, abuse prevention, and basic visit measurement. A random device cookie separates fair per-person limits from a shared Wi-Fi address; it identifies a browser, not a person, and is not used for tracking. Submission IPs are kept with the related contribution for up to 30 days, then removed. IP addresses are never public. Legal basis: our legitimate interest in keeping the service secure.
Analytics and campaign attribution
We use Cloudflare Web Analytics - cookieless, processing aggregated data (page views, country, browser type) with no personal identifiers and no cross-site tracking. If you arrive through a tagged campaign we may keep bounded labels (source, medium, campaign, referrer host); we never place names, emails, or event names in those labels or in our own funnel events. Legal basis: our legitimate interest in improving the service and measuring our marketing.
We also use Google Analytics across celebrari.love, including on skies, to understand how the service is used. It sets first-party cookies and receives the address and title of each page you view (on a sky these include the sky’s link name and title), your approximate location derived from your IP address, and your device and browser type. It is not loaded on private links that carry an access token (story, invitation and check-in links), on the live screen, or in our admin area, and its advertising features are switched off.
In the European Economic Area, the United Kingdom and Switzerland, Google Analytics loads only after you accept analytics cookies, and the legal basis is your consent. Elsewhere it runs on the basis of our legitimate interest in understanding how the service is used. Either way you can change your choice at any time under Cookie settings (Section 11).
We send creators transactional and lifecycle emails: the order email with sky links, media expiry reminders before package media is deleted, a notice if the included contribution limit is passed, and access-recovery and link-rotation emails. We keep the creator’s email for as long as the sky exists to send these. We do not send marketing to guests, and guests are never asked for an email to take part. Ask us at any time to stop lifecycle emails.
A guest’s message text, chosen signature, and any photo attached to their star are visible to everyone who can view that Private Sky, live screen, or wall, from the moment the star is placed.
Not public: the creator’s email and order details, private original photos and videos, IP addresses, and control links. Private control links are capabilities - whoever holds one gets the matching access, so they should never be shared publicly.
The Common Sky is a separate free public collection. Its written messages, chosen signatures, photos, and voice notes are visible to anyone who opens the public sky. The written message is retained with the collection; optional photos and voice notes are kept for 180 days from creation and then removed.
If you are in the European Economic Area, the UK, or another privacy-rights jurisdiction, you may have the right to:
Email hello@celebrari.love; we respond within 30 days. You can also complain to your local data protection authority. For content a creator controls, we may refer your request to the creator or handle it together with them.
If your name or a message about you appears in a sky and you want it removed, email hello@celebrari.love with a link and enough detail to find the content. We review such requests as soon as reasonably possible. Creators can also hide contributions themselves from their private controls.
Guest media files are stored in the European Union and our database in the United Kingdom. Some providers (such as Google Analytics) store or process data in the United States. Where data of people in the EEA or UK is transferred outside those areas, our providers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism.
Celebrari is directed at adults. Purchasing requires being 18 or older; guests should be 16 or older to submit content. We do not knowingly collect personal data from children under 16, and creators are responsible for minors who contribute. If you believe a child’s data has been collected, contact us and we will remove it promptly.
We do not use advertising cookies or cross-site tracking. Apart from the measurement cookies listed last, the cookies we set are functional:
You can change your analytics choice at any time: .
Local storage on your device is used only for function - for example checkout state, the creator’s share state, export progress and your analytics cookie choice. None of it is used to profile you.
All traffic uses HTTPS. The database is not reachable from the internet - every query goes through the application's privileged server-side layer, and the database key never reaches client-side code. Management access uses short-lived, HttpOnly, role-scoped sessions; access links can be rotated by the creator; media uploads use short-lived, single-purpose tokens; and photos are re-encoded to strip hidden metadata. We apply strict security headers, including a per-request content security policy. No system is perfectly secure, and we cannot guarantee the security of data transmitted over the internet.
We may update this policy as the service evolves. Material changes will be reflected in the “Last updated” date at the top of this page, and significant changes will be noted to creators by email where appropriate. Continued use after a change means you accept the revised policy.
Privacy questions, data requests, or concerns: hello@celebrari.love