Privacy Policy

1. Who we are

TrackSat is an independent project operated by Luc Python, based in Switzerland. This privacy policy applies to the website at tracksat.app (and any future domain we move to) and any related services.

We are the data controller for the personal data described below, within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

2. What we collect

2.1 Information your browser gives us automatically

When you visit TrackSat, our hosting provider (Vercel) and our analytics provider (Vercel Web Analytics) automatically receive standard web request data, including:

• Your IP address (used to serve you from the nearest edge and to aggregate anonymous visitor counts; not stored long-term as a personal identifier)
• Your browser type and version, operating system, and device type
• The pages you visit on TrackSat and the order you visit them in
• The page that referred you to us, if any
• Approximate location derived from your IP (country / region only, not precise coordinates)

This data is used in aggregate to understand how TrackSat is being used and to improve it. Vercel Web Analytics is cookie-free and does not fingerprint users.

2.2 Information stored on your device

TrackSat uses your browser's local storage (not cookies) to remember:

• Your favorite satellites, so they show up in the Favorites panel on return visits
• Your preferred map style (Dark, Light, Satellite, Terrain)
• Which features you've seen, so we don't show onboarding hints twice

This data stays on your device. We never see it. You can clear it at any time from your browser settings (clear site data for TrackSat), which will reset these preferences.

2.3 Information you explicitly provide

Some features ask for your permission to access data that stays on your device:

• Geolocation — for "Above Me", "Tonight's Passes", and AR Sky View. Your coordinates are used to compute which satellites are visible from your position and are never sent to our servers. We can't see where you are.
• Camera access — for AR Sky View. The camera feed stays on your device and is rendered locally; no video or photo ever leaves your browser.
• Device orientation (gyroscope) — for AR Sky View. Used to align satellite overlays with the sky. Never transmitted.

2.4 Error telemetry (Sentry)

We use Sentry to automatically collect anonymous error reports when TrackSat crashes or behaves unexpectedly. This helps us find and fix bugs. Error reports include:

• The error message and stack trace
• Your browser, operating system, and device type
• The URL where the error happened
• The release version of TrackSat you were running

We have explicitly disabled Sentry's default collection of personally identifiable information (IP addresses, user agents stored as identifiers). Error telemetry is processed by Sentry within the European Union.

2.5 Payment information (Pro subscription only)

If you subscribe to TrackSat Pro, payment is processed by Stripe. We never see your full card number, CVC, or billing details — Stripe handles payment data directly and tells us only whether your subscription is active. Stripe's privacy policy applies to that data.

3. Why we collect it (legal basis)

• Running the site. Our legitimate interest in operating and securing a publicly-available service (FADP Art. 31; GDPR Art. 6(1)(f)).
• Error telemetry. Our legitimate interest in fixing bugs and keeping the service reliable.
• Geolocation / camera / gyroscope. Your explicit consent, which you give by allowing the permission prompt. You can revoke it at any time from your browser settings.
• Payment processing. Necessary for the performance of a contract if you upgrade to Pro.

4. Who we share data with

TrackSat shares data with a small number of infrastructure providers only to operate the service:

• Vercel — hosting and analytics (privacy policy)
• Sentry — error monitoring, EU data region (privacy policy)
• Stripe — payment processing, only if you upgrade to Pro (privacy policy)

We do not sell or rent your data to anyone. We do not share data with advertisers. We do not use ad tracking cookies.

5. International data transfers

Sentry error telemetry is stored in the European Union. Vercel operates a global edge network and may process request data in Switzerland, the EU, the United States, and other regions depending on where you are. Stripe processes payment data globally and is certified under frameworks that enable transfers from Switzerland and the EU to the US.

6. How long we keep it

• Request logs (Vercel) — up to 30 days, then deleted
• Analytics (Vercel) — aggregated, retained indefinitely with no individual identifiers
• Error reports (Sentry) — 90 days (default retention on Sentry's free tier)
• Local storage on your device — kept until you clear it
• Stripe payment records — kept by Stripe for as long as required by financial regulations

7. Your rights

Under Swiss FADP and GDPR (if you are in the EU), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Object to processing based on legitimate interests
• Withdraw consent at any time for consent-based processing (e.g. by denying geolocation or camera permission in your browser)
• Port your data to another service
• Lodge a complaint with your local data protection authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC)

Most of these rights are satisfied automatically by TrackSat's design: we store almost nothing about you, and what we do store is either on your device (which you control) or inside our infrastructure providers (whose deletion processes we will honor on request).

8. Children

TrackSat is not directed at children under 13 (or under 16 in the EU) and we do not knowingly collect personal data from children. If you are a parent and believe a child has provided us with personal data, contact us and we will delete it.

9. Security

TrackSat is served exclusively over HTTPS with HSTS. Our infrastructure providers (Vercel, Sentry, Stripe) all operate SOC 2 Type II or equivalent security controls. That said, no system is perfectly secure, and we make no guarantee that data transmitted to or from our servers cannot be intercepted.

10. Changes to this policy

We may update this policy occasionally. When we make material changes, we will update the "Last updated" date at the top of this page and, for significant changes, display a notice in the TrackSat app. Continuing to use the service after changes are posted means you accept the updated policy.