Privacy

EarthReplay is operated from the European Union and complies with the EU General Data Protection Regulation (GDPR). This page explains what personal data we collect, why, who we share it with, and how to have it deleted. The legal basis for processing your order data is performance of the contract you enter when you place an order (GDPR Art. 6(1)(b)); the IP-based location lookup described below relies on our legitimate interest in centring the map on you (Art. 6(1)(f)).

What we store

When you place an order we store: the email address you provide, the location coordinates and place name you select, the year range you choose, the view scale, whether you chose the up-close render, and the order itself (Stripe payment ID, status, timestamps). For gift orders we additionally store the recipient’s email and your gift message.

Imagery of identifiable property

Be aware that the imagery we render can be detailed. The standard “wide” timelapse uses satellite imagery (10–30 m per pixel), where individual buildings are only a pixel or two. The optional up-close (“see your house”) render uses sub-metre aerial imagery, at which an individual dwelling, its garden, vehicles and similar features can be visible. We require you to confirm at checkout that you own the property or have the owner’s permission before we produce an up-close render. If you believe imagery of your property has been ordered without authority, email hello@earthreplay.com and we will remove it.

IP-based location lookup

To centre the map near you when the order page loads, your IP address is sent to a third-party IP-geolocation service to obtain an approximate (city-level) location. We currently use ipapi.co (with ip-api.com as a fallback). We do not store your IP address or the returned location with your order; the lookup result is held briefly in an in-memory cache (about an hour) purely to avoid repeating the call, and is not written to our database. Private and carrier-grade-NAT addresses are never sent to the provider.

Processors and third parties we use

We share data with the following processors only to the extent needed to run the service:

• Stripe (Ireland / USA) — payment processing.
• Resend (USA) — transactional and delivery email.
• Cloudflare R2 (USA / EU) — storage of your rendered video and thumbnails.
• ipapi.co / ip-api.com — approximate location from your IP (see above).

To produce your video we fetch public imagery from external archives — USDA NAIP (US, public domain), Toitū Te Whenua LINZ (New Zealand, CC BY), and Sentinel-2 / Landsat via the Microsoft Planetary Computer. These requests carry only the coordinates needed to fetch tiles; no personal data, your email, or your IP is sent to them. We do not sell your data, and we do not use it for advertising.

Cookies and local storage

We do not use third-party tracking or analytics cookies. Your in-progress order is held in your browser’s sessionStorage so it survives a page reload; it is cleared when you close the tab and never leaves your device until you submit the order. If you choose a site language, we store that single preference in a first-party cookie.

How long we keep things

Order records and the rendered video are kept for 24 months from delivery, after which we delete the row and the file from R2. You can ask us to delete them sooner (see below).

Your rights (including erasure)

Under the GDPR you have the right to access, rectify, and erase your personal data, to restrict or object to processing, and to data portability. To exercise any of these, email hello@earthreplay.comwith the subject line “delete my data” (or describe your request) and we will action it within 30 days.

Erasure overrides our refund retention.Our refund policy notes that we don’t routinely delete a delivered video when you ask for a refund — but a GDPR erasure request (Art. 17) does require deletion, and it takes precedence: on an erasure request we delete the order record, your email, the gift recipient’s email and message, and the video file from R2.

Contact

Questions, or to reach the data controller? Email hello@earthreplay.com.