Privacy Policy
Draft for review by an attorney before OrbitWatch launches publicly. It is not legal advice.
OrbitWatch is built so that it needs almost nothing from you. This policy explains exactly what it handles. "OrbitWatch," "we" and "us" mean Tajuddin Moore, who operates the Service.
The short version
- Your location is used on your device to calculate passes. It is never sent to us.
- No accounts, no cookies, no advertising, and no analytics or tracking scripts.
- Fonts, code and orbit data are served by OrbitWatch itself, so loading the app doesn't send your information to other companies.
- We never sell or share personal information.
What OrbitWatch handles
| What | Where it goes | Why | How long |
|---|---|---|---|
| Your location, if you tap "Use my location" (rounded to about 1 km), or coordinates you type | Stays in your browser | To calculate when satellites pass over you | Saved on your device until you clear site data |
| Your chosen city | Stays in your browser (local storage) | So the app remembers your sky | Until you clear site data |
| Your IP address and basic request details, sent by every browser | Our server | To deliver the page and data, and to limit abuse (rate limiting) | Kept in memory for about one minute; access logs are turned off |
| Name, email and reason, if you request an API key | Our server's application log | To review and answer your request | Until your request is handled, and no longer than 12 months |
| Usage totals, such as how many requests each page received | Our monitoring system | To keep the Service fast and reliable | Totals only; they contain no personal information |
What we don't do
- We don't sell, rent or share personal information, and we don't use it for advertising.
- We don't build profiles of visitors or track you across other websites.
- We don't use cookies.
Service providers
When OrbitWatch is hosted publicly, it will run on a cloud hosting provider that processes requests on our behalf under its own security and privacy commitments. This policy will name that provider before launch.
Your rights
Depending on where you live, including under the EU and UK GDPR and California's CCPA/CPRA, you can ask to see, correct, delete or get a copy of personal information we hold about you, and you can object to how we use it. Email us at the address below and we will respond within 30 days. You won't be treated differently for using these rights. If you are in the EU or UK, you can also complain to your local data protection authority.
Legal bases (EU/UK): we use connection details for our legitimate interest in running a secure service, and access-request details to respond to the request you made.
Children
OrbitWatch is for a general audience and is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.
Security
The Service uses HTTPS, a strict content security policy, encrypted storage for secrets, and approved API keys stored only as one-way hashes. No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as the law requires.
International users
OrbitWatch is operated from the United States. If you request an API key from another country, your request is processed in the United States.
Changes
Before OrbitWatch collects anything new, such as emails for a Pro waitlist or accounts, this policy will be updated to say exactly what, why and for how long, and the app will tell you before you share it.
Contact
Tajuddin Moore, OrbitWatch · tajmoore74@gmail.com