Privacy Policy

Last updated: February 2026

1. What we collect

• Registration data: full name, country, optional email & password (used for login).
• Message to the future: the text you optionally leave in the time capsule.
• Payment data: processed by Stripe. We never see your full card number; we only receive a payment status and last-4 digits.
• Referral data: which citizen referred you (if any), and how many people you have referred.
• Analytics: anonymised page-view and interaction events (e.g. via PostHog) for product improvement.

2. What we do with it

• Create and display your public registry entry (first name, country, optional message).
• Send you your certificate and, if you opt in, occasional Project updates.
• Improve the site (bug fixes, UX, security).
• Aggregate anonymised statistics such as "total citizens" and "countries represented".

3. What we DO NOT do

• We do not sell your personal data.
• We do not share individual data with advertisers.
• We do not publicly display your email, password, IP address, or payment details.

4. Public information

The public registry shows your first name and country alongside your plot coordinates and (if you leave one) your message to the future. This is the entire point of the registry — to celebrate collective humanity. Please do not include personal contact details, addresses, or third-party personal data in your message.

5. Cookies & login

We use a single httpOnly authentication cookie to keep you logged in. This cookie is essential to the service and is not used for tracking or advertising. Analytics is provided by PostHog and follows privacy-friendly defaults (identified profiles only after signup).

6. Data retention & deletion

Your registry entry is kept as long as you remain a citizen. You may request deletion at any time by contacting us — we will remove your personal data and reduce your registry entry to an anonymised placeholder (e.g. "A citizen of Earth"). Payment records are retained as required by law.

7. Third-party services

• Stripe — payment processing.
• Resend — transactional email delivery (welcome, receipt).
• PostHog — anonymised product analytics.
• MongoDB Atlas — hosted database.
• NASA imagery is served from the site itself; no data is sent to NASA.

8. Children

The service is not directed to children under 13. If you are a parent and believe your child has registered, please contact us and we will remove the account.

9. Your rights

You may access, correct, export, or delete your personal data at any time. Contact us via the homepage links and we'll help.

10. Changes

We may update this Privacy Policy from time to time. Material changes will be highlighted on this page.