Privacy Policy

Last updated: June 26, 2026

The short version: You can use the Orbital Streams API and data without an account — we collect nothing from you. If you create a dashboard account, we store only your name, email, and a hashed password. We don't track you, log your IP, profile your usage, or sell or share your data with anyone. Ask us anytime and we'll delete your account.

Who we are

Orbital Streams ("we") operates a real-time global data API and visualization platform at orbitalstreams.com. This policy explains what personal data we handle and your rights over it, consistent with the GDPR and CCPA.

Using the API without an account

The public API (/api/v1/*), the MCP server, and the CLI are usable without signing up. When you use them we do not collect personal data about you. We apply basic, non-identifying rate limiting to keep the service available; we do not build a profile of API users.

What we collect (account holders only)

If you create a dashboard account, we store only:

Name — the display name you provide.
Email address — used to sign in and to send a one-time verification email.
Password — stored only as a salted, irreversible hash (PBKDF2, 310,000 iterations). We never see or store your plaintext password.
Account metadata — your role (user/admin), whether your email is verified, and the account creation timestamp.
Your saved settings — any dashboard presets or output targets you choose to save. These are your configuration, not personal data about you.

What we do NOT collect

No IP address logging or device/user-agent tracking tied to your identity.
No behavioral analytics, profiling, or per-user usage tracking.
No advertising identifiers and no third-party ad/tracking cookies.
No payment or financial data (any future micropayments are handled on-chain and keyless — nothing is stored by us).
We never sell, rent, or share your data with third parties for their own purposes.

Cookies & local storage

We use a single authentication token to keep you signed in, and your browser's local storage to remember your dashboard preferences. We do not use tracking or advertising cookies.

Service providers

We rely on a small number of processors strictly to operate the service:

Resend — sends your account verification email (receives your email address for that purpose only).
Hosting (Hetzner, EU) — runs our servers and database. Your account data is stored in the EU.

How long we keep it

We keep your account data for as long as your account exists. Request deletion and we remove your account and associated data promptly. Aggregate, non-identifying operational metrics (e.g. which data streams are popular overall) are not linked to you and may be retained.

Your rights

You can request to access, correct, or delete your data, or object to its processing. Under the GDPR you may also request data portability and lodge a complaint with your supervisory authority; under the CCPA you have the right to know and to delete, and we do not sell personal information. To exercise any of these, contact us below.

Children

Orbital Streams is not directed at children under 16 and we do not knowingly collect their data.

Changes

If we change this policy we'll update the date above and, for material changes affecting account holders, notify you by email.

Contact

Privacy questions or data requests: privacy@orbitalstreams.com.