Privacy policy
This policy explains what STELLUN collects, why, who processes it, and how you can control or delete it. It is meant to match the product as it runs today—not an earlier, account-free draft.
Last updated: 25 October 2026
1. Summary
Many STELLUN tools work in the browser with public scientific data. An account is optional for core browsing of public pages, but signing in unlocks saved chats, profile features, and cross-device sync for some items.
When you create an account we store your email and authentication data. If you use optional features we may also store profile details, AI conversations, feedback, suggestions, and (only if you allow it) location-related data for sky and pass features. We do not sell personal data and we do not run advertising trackers on STELLUN.
Related rules of use: Terms of Service.
2. Who operates STELLUN
STELLUN is an independent educational dashboard. It is not affiliated with NASA, NOAA, ESA, or any other space agency. For privacy requests, use the contact method in section 12 below.
3. Data we process
3.1 Without an account
- Technical logs. Hosting infrastructure (for example Cloudflare) may process IP address, user agent, and request metadata needed to deliver the site and protect it from abuse. These logs are controlled by the host’s own retention practices.
- Browser storage. Preferences such as theme, and some study or list data, may stay in your browser (local storage) and never leave your device unless a feature explicitly sends them.
- Location (optional). Sky and satellite-pass features can use your device location only after you grant permission in the browser. Coordinates may be sent to STELLUN’s servers for calculations or for a weather lookup (Open-Meteo). We do not use location for advertising.
- Feedback or suggestions. If you submit a form, we store the message and any name or email you choose to include, so we can improve the product or reply.
3.2 With an account
- Account credentials. Email address and authentication secrets (handled by our auth provider). Password reset flows use email links.
- Profile. Optional display name and avatar (uploaded image or a preset). Avatar files are stored in object storage tied to your user id.
- Stellun AI conversations. When you are signed in, questions and answers can be saved to your account so you can reopen them on another device. You can delete individual chats or all saved chats from the Stellun AI page. Signed-out use does not keep a permanent chat history on the server in the same way.
- Session. Sign-in uses session tokens (typically in cookies or equivalent browser storage) so you stay signed in securely.
3.3 Operational data (not for marketing)
- Cached public feeds (launches, weather indices, catalogues, news) so the site stays fast and respects upstream rate limits.
- Diagnostic or error events used to keep feeds healthy (admin tooling). These are for reliability, not for building advertising profiles.
4. Why we process data
- Provide and secure the website and accounts
- Sync optional saved content you request
- Compute location-based sky and pass information you ask for
- Reply to feedback and improve the product
- Prevent abuse (including captcha on auth flows)
- Meet legal obligations if they apply
5. Cookies and similar technologies
STELLUN does not use third-party advertising or analytics cookies.
If you sign in, essential session/auth storage is used so the product can recognize your account. Local storage may hold preferences and client-only study data. Blocking all storage may break sign-in or those features.
6. Processors and third parties
We use service providers to run STELLUN. They process data only to provide their service to us:
- Supabase — authentication, database, and file storage (accounts, profiles, saved chats, feedback, caches).
- Cloudflare — hosting and delivery of the application (Workers / edge network).
- hCaptcha — bot protection on sign-in, sign-up, and password reset when configured.
- Open-Meteo — weather-related lookups when a feature needs them and location is provided.
- Public science and news sources (examples: NASA, NOAA, CelesTrak, Spaceflight News API, launch data providers) — requested from our servers or your browser to show public information. Those organizations set their own terms for the underlying data.
- AI model provider — when you use Stellun AI, the text of the conversation (or a recent slice of it) is sent to generate a reply. Avoid pasting secrets or sensitive personal data into the assistant.
Some processors may store or process data outside Nigeria. By using STELLUN you understand that cross-border processing can occur as needed to operate the service.
7. Location
Location is requested through your browser’s permission prompt. You can deny or revoke it in browser settings. Without location, sky and pass tools fall back to manual coordinates or limited functionality.
We do not sell location data. Coordinates used for a request are not used to build a marketing profile.
8. Children
STELLUN is aimed at students and enthusiasts. Under the Terms of Service, accounts are for users who meet the stated minimum age (16, or higher if your country’s digital-consent age is higher).
We do not knowingly create accounts for children below that age. If you believe a child under the minimum age has an account, contact us (section 12) and we will delete it.
9. Retention
- Account data — kept while the account exists.
- AI chats — until you delete them or the account is deleted.
- Feedback / suggestions — until handled or no longer needed for product improvement.
- Caches and diagnostics — short-lived operational retention appropriate to feed health.
- Host logs — per the host’s standard security practices.
10. Your choices
- Use many features without creating an account
- Refuse or revoke browser location permission
- Delete AI conversations from the Stellun AI page when signed in
- Update or clear profile avatar and display name when signed in
- Request account and personal data deletion (section 12)
11. Security
We use industry-standard providers and access controls (including restricted admin access to operational data). No method of transmission or storage is perfectly secure. Use a unique password and protect your email account.
12. Contact and deletion requests
To request access, correction, or deletion of personal data associated with your account, email:
Use the same address you registered with, if you have an account, so we can verify the request. We will respond within a reasonable time.
If you later use a dedicated domain email (for example legal@…), update this section so it stays accurate.
13. Changes
If STELLUN’s data practices change in a material way, we will update this page and the “Last updated” date. Continued use after an update means you acknowledge the revised policy, except where local law requires more.

