Privacy policy
Last updated
This policy explains what Orbiwatch collects, why, where it’s kept and for how long. We follow the Australian Privacy Principles.
Who we are
Orbiwatch is run by Vladislav Kutepov, a sole trader in South Australia (ABN 90 374 636 715). “We” means that business. For anything about your privacy, write to us through the contact page.
What we collect
When you buy a plan
Stripe takes your payment. Your card details go to Stripe and never reach us. Stripe also asks for your email address, and a billing address if it needs one. We see these in our Stripe account and use them to deliver your order and reply to you.
Our own order record keeps:
- what you chose: the satellite, the place, the story, your brand name, colours and logo, and the film’s format
- the name and coordinates of the place, if you chose your own
- the plan, its currency and price, the dates and whether it’s paid
- Stripe’s reference numbers for the checkout, the customer and the subscription
It also keeps the email address you paid with, so we can confirm your order and tell you when a plan ends. It doesn’t hold your card details. Stripe keeps the satellite, place, story and brand name with your payment, so the two can be matched.
When you create an account and sign in
You sign in with your email address. We email you a link that works once, within 15 minutes. Before we send it, we ask Cloudflare’s public DNS whether the part after the @ can receive email. We send only that domain, never your address.
Your account keeps your email address, first name, surname, organisation and website, and the version of the terms you agreed to and when. Two-factor sign-in keeps your authenticator key, encrypted, and your recovery codes as one-way hashes, so nobody can read them back.
When you save a film
Saved films are stored against a one-way hash of the email address you signed in with, never the address itself. A saved film holds its title, satellite, place, story, settings and a small preview image.
When you set up a screen or an embed
A Display link keeps its label, what it shows, the domain it may run on, the order it belongs to, and a random id for the one screen it runs on. An embed code carries the domain it runs on. We don’t keep a separate record of it.
When you visit
Cloudflare delivers the site, so it sees your IP address and browser details, as any web host does. To limit abuse, we count requests from each IP address in counters that last at most an hour. The address itself isn’t stored.
What stays in your browser
The site keeps these on your device, in your browser’s storage:
- the currency you chose for prices
- your logos, up to six
- the film you have open, and films saved on this device, with small previews
- your colour choices, the logo you picked, recent satellites and recent commands
- whether you’ve seen the studio tour
- the reference of your last order, which the thanks page uses for 48 hours
- on a Display screen, a random id that ties its link to that screen
A logo leaves your browser only when you start an order with it selected. It’s then kept with that order, so your paid film can show it. To remove everything else, clear this site’s data in your browser.
The footer shows the time where you are, from your device’s time zone, or from the one Cloudflare works out from your IP address when your device doesn’t say. When neither is known, it shows UTC. Neither is stored.
Cookies
We set three kinds of cookie, all for this site only. One keeps you signed in for 30 days, only when you sign in. One remembers your privacy choice. The others hold a random id for analytics, set only while analytics is on (see Analytics).
Measuring performance
To keep Orbiwatch fast, about one in five page views sends us a short report when you leave the page. It holds:
- how quickly the page appeared, how much it moved while loading, and how fast it answered a tap or click
- which graphics mode it used
- a rounded count of your device’s processor cores and memory
- which page it was, such as /studio.html
- the site version
- any script errors
The report carries no cookie and no identifier. We don’t store your IP address with it, and we keep only daily totals.
Analytics
With your permission, we use Google Analytics to count visits and to see which pages, places, satellites, views and plans people look at, which currency they choose, and whether a checkout was started and finished.
It runs through Cloudflare. A script from this site sends each event to Cloudflare, and Cloudflare passes it to Google. No Google script runs in your browser. Google receives:
- the page address, without sign-in or order codes
- the event, such as the place or satellite you picked
- your approximate location, worked out from your IP address. Cloudflare shortens the address before it reaches Google.
- your browser and device type
- a random id kept in a cookie, so a return visit isn’t counted as a new visitor
- for a purchase, the order reference, plan, amount and currency. Never your name, email address or card.
In the European Economic Area, the UK, Switzerland and Quebec, analytics runs only after you say yes, and a short notice asks on your first visit. Elsewhere it’s on from your first visit until you turn it off. If your browser sends Global Privacy Control or Do Not Track, it stays off and nothing asks. To change your answer, use “Privacy choices” at the bottom of any page.
Google keeps this data for 14 months. Google signals and advertising features are off, and nothing is shared for advertising. Google processes it for us under its data processing terms, and it may be handled in the United States. Stripe’s checkout page is Stripe’s own, and Google Analytics doesn’t run there.
What we don’t do
No advertising, and analytics only as Analytics describes. Apart from Cloudflare’s analytics script, served from this site, the site loads no scripts from anyone else. We don’t sell personal information.
Who processes it
- Stripe processes payments.
- Cloudflare hosts the site and stores our data. It also sends the sign-in emails.
- CelesTrak publishes the orbital data. Our servers fetch it, and nothing about you is sent.
- Google runs Google Analytics, if you allow it.
When a film is embedded on a customer’s website, your browser loads it from us, through Cloudflare.
Where it’s stored
Cloudflare and Stripe work worldwide, so your information may be stored or processed outside Australia, including in the United States and Europe. Both handle it under their own data protection terms.
How long we keep it
- Your account: until you ask us to delete it.
- Unpaid orders: 30 days.
- Paid orders: 5 years, as tax records, which the ATO requires.
- Saved films: until you delete them. A preview image left without its film is deleted after 30 days.
- Display links: while they’re in use, and 90 days after they’re switched off.
- Logos sent with an order: as long as the order.
- Performance reports: daily totals, kept for 400 days (about 13 months). They identify no one.
- Google Analytics: 14 months.
How we protect it
Everything travels over HTTPS. Private data is stored apart from the public site, and none of it is served to the web. Display and embed links are signed, so they can’t be forged. Only the person who saved a film can open it.
Your rights
You can browse Orbiwatch without telling us who you are. You can ask to see the personal information we hold about you, correct it, or have it deleted. Write to us through the contact page and we’ll answer within 30 days. We have to keep paid orders for tax, so those stay for their 5 years.
Complaints
If you’re unhappy with how we’ve handled your information, tell us through the contact page and we’ll answer within 30 days. If that doesn’t resolve it, you can complain to the Office of the Australian Information Commissioner (OAIC).
Changes to this policy
If we change this policy, we’ll post the new version on this page with a new date.