Privacy

The address you ask us to photograph, because it is the product. Your email address, because it is how a mission reaches you and how your account exists. Your delivery address, if it differs from the target. Payment is processed by Stripe; we never see or store card details.

We also store the mission itself: its capture telemetry, its timeline, the frames acquired for it, and any Mission Comms correspondence.

No password — access is by single-use link. No advertising identifiers, no third-party trackers, no cross-site pixels, no session recording, no behavioural profiling. We do not sell or rent anything about you.

The street address you target is used to task the satellite and to produce the print. It is visible to you inside your own account. It is never shown on a public mission page, never shown on a shared mission link, and never included in the archive. Public and shared views resolve location to city level only.

SkyFi receives the target coordinates in order to task a capture. Gelato receives your delivery address and the print file in order to produce and ship the object. Stripe processes payment. Our email provider delivers transactional messages. Each receives only what its job requires, and none of them receive your data for their own purposes.

Mission records, including the frame and its telemetry, are kept for as long as your account exists, so you can return to a mission years later. Order and payment records are kept for seven years where tax law requires it. Mission Comms transcripts are kept with the mission. There is no automatic purge: nothing is deleted until you ask us to delete it, or until we close the account.

Ask us to delete your account and we delete your personal data — email, addresses, correspondence — and retain only the anonymised financial record the law requires. There is no self-serve delete button; it is a request to privacy@shotfromspace.com, carried out by a person, and confirmed to you when it is done.

You can request a copy of everything we hold about you, ask for a correction, or ask for deletion. Send it to privacy@shotfromspace.com — that address is the route of record and it reaches a person. Mission Comms is an automated operator scoped to one mission's state; it will point a data request here rather than answer it. Requests are answered within 30 days. If you are in the EEA or the UK you may also complain to your national data protection authority.

One cookie: a session cookie set after you use a sign-in link, so you stay signed in. It is httpOnly, same-site, and expires after thirty days. There is no analytics cookie and no consent banner, because there is nothing to consent to.

This service is run by software agents. Your correspondence in Mission Comms is answered by an automated operator with access to your mission state. It cannot see your payment details. Ask for a human at any point and the mission is escalated.