Privacy Policy

24yr4.com ("we", "us", "our") is an independently operated website that tracks asteroid 2024 YR4. Our contact email for privacy enquiries is hello@24yr4.com.

We process the following categories of personal data:

We do not collect passwords, create user accounts, or operate a newsletter. We do not knowingly collect data from children under 16.

When you first visit our site a cookie banner lets you accept or decline non-essential cookies. We implement Google Consent Mode v2 — analytics and advertising storage default to "denied" until you opt in.

For a full list of cookies and how to manage them, see our Cookie Policy.

We share personal data only with the processors necessary to operate this site:

• Vercel — hosting and edge infrastructure (may process IP addresses for CDN routing and geolocation headers).
• Google LLC — Analytics (GA4) and advertising (AdSense). Subject to your consent choice. Google Privacy Policy.
• Stripe — payment processing. Stripe acts as an independent data controller for payment data. Stripe Privacy Policy.
• Printful — merchandise printing and fulfilment. We share your shipping address and email so they can produce and deliver your order. Printful Privacy Policy.
• Supabase — database hosting (stores aggregated public content such as news headlines and social posts; no personal data).
• Amazon — affiliate product links. Clicking an affiliate link takes you to Amazon, which is governed by Amazon's Privacy Notice.

Some of our processors (Vercel, Google, Stripe, Supabase) are based in the United States. Transfers are safeguarded by Standard Contractual Clauses (SCCs) included in each provider's data processing terms, or by the EU-US Data Privacy Framework where applicable.

• Analytics data: retained by Google for 14 months, then automatically deleted.
• Order data: retained by Stripe and Printful in accordance with their retention policies and applicable tax/legal obligations.
• Cookie consent preference: stored in your browser until you clear site data.
• Server logs: Vercel retains edge logs for up to 30 days.

Under the UK GDPR, EU GDPR, and similar laws you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — you can withdraw cookie consent at any time by clearing your browser's site data or using the cookie settings link in our footer.

To exercise any of these rights, email hello@24yr4.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g. the UK ICO).

If you are a California resident, you have the right to know what personal information we collect and how it is used, to request deletion, and to opt out of the "sale" or "sharing" of personal information. We do not sell your personal information. Declining advertising cookies in our consent banner opts you out of any sharing of data with ad networks. To make a request, contact hello@24yr4.com.

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided personal data to us, please contact us and we will delete it.

We may update this policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy.

For any privacy-related questions or to exercise your data rights, please email hello@24yr4.com.