---
title: "Privacy"
description: "Draft privacy notice for the obop website and hosted beta: what is collected, why, how long, and your rights. A draft for review by counsel, not legal advice."
canonical: "https://obop-platform.sliplane.app/privacy/"
lang: "en"
---

# Privacy

> **This is a draft.** It describes what the software does today in plain language. It is not legal advice and is not a final, reviewed notice. It will be replaced after review by counsel. Do not rely on it as a contract.

## Who is responsible

The obop project, run by SpaceCorps. There is no data protection officer or EU representative named yet; those details will be added in the final notice.

## This website

- The website sets **no cookies** and uses no analytics, advertising or third-party scripts, fonts or images. All fonts and scripts are served from this site.
- Your chosen colour theme and the dismissal of the language hint are stored in your own browser (local storage). They never leave your device.
- Like any web server, the server that hosts this site processes your IP address and the pages you request to deliver them. We do not use that to build profiles.

## Sign-up and the hosted beta

When you create an account and an instance we process:

| Data                                    | Why                                             | Where                                           |
| --------------------------------------- | ----------------------------------------------- | ----------------------------------------------- |
| Email address                           | Sign in, and to identify the account            | The control plane's database                    |
| Password                                | Sign in. Stored only as a one-way Argon2id hash | The control plane and, as a hash, your instance |
| Instance name and address               | To provision and show your instance             | The control plane                               |
| Everything you enter into your instance | To provide the service                          | A database belonging to your instance           |

We do not sell personal data. We do not use the data in your instance for anything but running it.

## Subprocessors

The hosted beta runs on Sliplane. The list of subprocessors and the places data is processed will be set out in the final notice and in a data processing agreement. Do not use the beta for regulated or special-category data.

## How long

Account data is kept while the account exists. Deleting an instance deletes its database. Backups of the hosted databases do not exist yet.

## Your rights

Depending on where you live you may have rights to access, correct, delete, restrict or move your data and to object to processing. Until a mailbox exists, open a request through the channels on the [Contact](/contact/) page without including personal data, and we will arrange a private way to continue.

## Children

obop is not intended for children.

## Changes

This draft will change. The final notice will carry a date.