Privacy policy

OrbitalSpace is operated by Kshitij Bhatnagar, an independent developer in India. For any privacy question or request, email [email protected].

We do not collect or store any personal data. Your browser loads public data directly from Open-Meteo, USGS and NASA EONET. Those requests contain only map coordinates or feed names, but like any web request they reveal your IP address to that provider, whose own privacy policy applies. Our host, Vercel, and our network provider, Cloudflare, keep standard security logs (IP address, time, page requested) for a limited period. We do not use these logs to identify anyone.

Sign in is optional and uses Google Sign-In through Firebase Authentication. When you sign in, Google shares with us only the basic profile information covered by the openid, email and profile permissions:

• your name,
• your email address,
• your profile photo URL,
• a unique account identifier (Firebase user ID).

We do not request access to your Gmail, Drive, contacts, calendar or any other Google data, and we never see or store your Google password.

• To sign you in and keep you signed in across visits and devices.
• To show your name and photo on your account page.
• To save and show the cities and countries you add to your watchlist, and to unlock CSV downloads.
• To reply if you request Team access or write to us, using your email address.

We do not use Google user data for advertising, profiling, selling, credit decisions or training AI or machine learning models, and humans do not read it except when you ask us for help or when the law requires it.

OrbitalSpace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your sign in record is kept by Firebase Authentication. Your saved places and any Team request are stored in Google Cloud Firestore in the Mumbai (asia-south1) region. Access rules allow only your own signed in account to read or change your saved places. Data is encrypted in transit (HTTPS) and at rest by Google Cloud.

We do not sell, rent or trade your data. It is processed only by the service providers that run OrbitalSpace: Google (Firebase Authentication and Firestore), Vercel (hosting) and Cloudflare (network security). Each processes data only to provide its service to us. We would disclose data only if required by law.

We keep your data while your account exists. You can remove any saved place at any time on your account page. The Delete account button on the same page permanently erases your saved places, any Team request and your sign in record immediately. You can also email [email protected] and we will delete your data within 30 days. You can revoke OrbitalSpace's access to your Google account at any time at myaccount.google.com/connections.

Signing in sets one strictly necessary cookie, __session, holding a sign in token that expires after an hour and is refreshed while you use the site. Firebase keeps your sign in state in your browser's local storage. The page address remembers which layer and place you are viewing so links can be shared. We use no analytics, advertising or tracking cookies.

You can ask to access, correct, export or delete your data, or withdraw consent, by emailing [email protected]. This includes your rights under India's Digital Personal Data Protection Act, 2023 and, where it applies, the GDPR. OrbitalSpace is not directed at children under 13.

If we change this policy, we will update the date at the top of this page, and we will email signed in users before any change that affects how their data is used.