Privacy Policy

How Sunline handles data. Plain language, no surprises.

Last updated: 6 September 2026

Who we are: Sunline is published by Lotabytes, an independent software studio. Questions about this policy or about your data can be sent to support@lotabytes.com.

1. The short version

Sunline doesn't have user accounts. We don't ask for your name, email, phone number, or any identity information.

The only category of personal information that ever leaves your device is your location, and only if you have granted location permission and only when you do something that requires it (look up a city, long-press the map). It is sent ephemerally to a third-party geocoding service that processes the request and does not retain it.

In addition, the app sends:

  • Crash reports to Sentry — technical breadcrumbs only, no personal information.
  • Anonymous analytics to PostHog — tagged with a randomly generated device identifier whose only purpose is to group events from the same install. It is not derived from any hardware identifier and cannot be used to identify a particular physical device or person.

We don't sell or share data with advertisers. The longer explanation is below.

2. What's stored on your device

Sunline saves a small amount of state on your device, so the app remembers your preferences between sessions. This includes:

  • Your selected country, city and coordinates.
  • Your display settings — every toggle on the "What's Displayed", "How It's Displayed", and "Advanced" tabs.
  • Your simulation settings — the start date, time and speed.
  • The state of your licence (Free or Premium) and the platform transaction identifier returned by the store.
  • A randomly generated device identifier (a UUID, see "Analytics" below).
  • A flag recording whether you've seen the initial onboarding screen.
  • Downloaded map textures and a cached copy of the most recent cloud cover image, if you have that enabled.

This information lives in your device's standard application storage (e.g. SharedPreferences on Android, UserDefaults on iOS, the equivalent on desktop). It is not transmitted to Lotabytes.

3. What is sent off your device — and why

3.1 Location — the one piece of personal data that leaves the device

Your latitude and longitude leave the device only when the app turns a point into a place name (reverse-geocoding), in two situations:

  • Long-press on the map. The app sends the pressed coordinates to OpenStreetMap's Nominatim service (nominatim.openstreetmap.org) to look up the country and city at that point.
  • First-launch GPS auto-detect, if you granted location permission. The one-off GPS fix is sent to Nominatim to find your country and city.

Picking a country and city in the Settings autocomplete sends nothing: the list and every city's coordinates are built into the app, so that lookup is entirely on-device.

In both reverse-geocoding cases the use is ephemeral: Nominatim processes the request, returns the answer, and does not retain the coordinates in a way that links back to you. Nothing about your location is sent anywhere else — not to Sentry, not to PostHog, not to Lotabytes' own servers. There is no background location tracking; GPS is read once on first launch (with permission) to set your initial location, and never again unless you explicitly request it.

3.2 Crash reports (Sentry)

When the app crashes or hits an unhandled error, an anonymous crash report is sent to Sentry, the error-tracking service we use to find and fix bugs. A typical report contains:

  • A stack trace (the technical breadcrumb leading to the error).
  • The exception type and message.
  • Operating system, OS version, device model, and app version.
  • The randomly generated UUID described in §3.4, so we can tell whether one install is hitting the same error repeatedly.

Reports do not include your location, your name, your email, contents you've typed into the app, or any identifier from your platform store account. Sentry's own privacy practices apply to data it handles on our behalf — see sentry.io/privacy.

3.3 Product analytics (PostHog)

Sunline can optionally send anonymous usage events to PostHog so we can understand which features are used and where things go wrong. This is configured at build time and is only active in builds where an analytics key is present. Where active, events sent include things like "app opened", "view mode switched", "premium purchase completed", "asset download failed" — and a small set of properties such as the device class (a string like mid2k-2096x1024-1.8 describing the device's size and resolution tier) and event-specific facts like the tier of a failed download. Where PostHog is active, the data flows to PostHog's EU region. Events do not include your geographic location coordinates, your selected country / city, your name, your email, or any identifier from your platform store account.

3.4 The anonymous device identifier

On first launch the app generates a random UUID (e.g. 3f29e0a2-…) and stores it locally. It is attached to crash reports and analytics events purely so we can aggregate events from the same install when investigating bugs or measuring how a feature is used. It is not derived from any device hardware identifier, advertising ID, store account, or anything else, and it cannot be used to identify a particular physical device or person — it is just a random number generated on your device.

3.5 Other network requests Sunline makes

These requests do not carry personal information:

  • Cloud cover imagery. Premium users with "Download Daily Cloud Formations" enabled, in Real Time mode, fetch recent cloud cover composites from clouds.matteason.co.uk. No personal data is sent.
  • Earth map textures. When you zoom, or when the app needs a higher-resolution Earth texture, it downloads pack archives from Lotabytes' content distribution endpoint. These are static files; the request identifies the tier and resolution only.
  • In-app purchase. If you tap "Upgrade to Premium" or "Restore Purchases", the purchase flow runs through Apple's App Store or Google Play. Lotabytes never sees your payment card or your store account credentials — your platform store handles all of that and only returns a transaction identifier to the app.

4. What we do not collect

  • No user accounts, names, email addresses, or phone numbers.
  • No advertising IDs (IDFA / GAID).
  • No contacts, photos, microphone, camera, or any other sensor data.
  • No third-party advertising or marketing trackers.
  • No social-network integrations.
  • No background location tracking.
  • We do not sell, rent, or share data with advertisers or data brokers.

5. Third parties

The services Sunline calls (and how they fit in):

  • OpenStreetMap / Nominatim — geocoding. Receives your coordinates ephemerally and does not retain them. Privacy policy.
  • Sentry — crash reporting. Receives anonymous crash reports as described in §3.2. Privacy policy.
  • PostHog — anonymous product analytics, EU region (when enabled in the build). Receives the anonymous events described in §3.3. Privacy policy.
  • matteason.co.uk — cloud cover composites (sourced from EUMETSAT data). No personal information sent.
  • Apple App Store / Google Play — in-app purchase. Their respective terms govern your purchase.

6. Data retention

Crash reports and analytics events are retained according to the standard retention policies of Sentry and PostHog respectively. We periodically review what we retain and remove what we no longer need. Data stored on your device stays there until you uninstall the app or clear its storage; on uninstall, every preference, the cached map textures, and your anonymous device UUID are deleted.

7. Children

Sunline is a general-audience application. It is not directed at children under 13 and does not knowingly collect any personal information from children. There is no account system and no behavioural advertising.

8. Your rights

Because Sunline does not collect personal information that identifies you, there is generally nothing to "access" or "delete" tied to your identity. If you have a specific question about your data, or you'd like crash reports and analytics events associated with your anonymous device UUID to be removed, write to support@lotabytes.com and we'll handle it.

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with comparable rules, applicable data-protection law gives you rights to access, correct, and delete data that identifies you. We facilitate these rights for any data we hold.

9. Changes to this policy

If we change this policy, we'll update the "Last updated" date at the top, and significant changes will be noted in the app's release notes. There is no automated way to subscribe to changes; the canonical version of this policy lives at lotabytes.com/sunline/privacy.html.

10. Contact

Email support@lotabytes.com.