Draft
Privacy
A plain-language draft of how this website and the hosted beta handle personal data.
This is a draft. It describes what the software does today in plain language. It is not legal advice and is not a final, reviewed notice. It will be replaced after review by counsel. Do not rely on it as a contract.
Who is responsible
The obop project, run by SpaceCorps. There is no data protection officer or EU representative named yet; those details will be added in the final notice.
This website
- The website sets no cookies and uses no analytics, advertising or third-party scripts, fonts or images. All fonts and scripts are served from this site.
- Your chosen colour theme and the dismissal of the language hint are stored in your own browser (local storage). They never leave your device.
- Like any web server, the server that hosts this site processes your IP address and the pages you request to deliver them. We do not use that to build profiles.
Sign-up and the hosted beta
When you create an account and an instance we process:
| Data | Why | Where |
|---|---|---|
| Email address | Sign in, and to identify the account | The control plane's database |
| Password | Sign in. Stored only as a one-way Argon2id hash | The control plane and, as a hash, your instance |
| Instance name and address | To provision and show your instance | The control plane |
| Everything you enter into your instance | To provide the service | A database belonging to your instance |
We do not sell personal data. We do not use the data in your instance for anything but running it.
Subprocessors
The hosted beta runs on Sliplane. The list of subprocessors and the places data is processed will be set out in the final notice and in a data processing agreement. Do not use the beta for regulated or special-category data.
How long
Account data is kept while the account exists. Deleting an instance deletes its database. Backups of the hosted databases do not exist yet.
Your rights
Depending on where you live you may have rights to access, correct, delete, restrict or move your data and to object to processing. Until a mailbox exists, open a request through the channels on the Contact page without including personal data, and we will arrange a private way to continue.
Children
obop is not intended for children.
Changes
This draft will change. The final notice will carry a date.