1. Controller
Marco Ferra, Av. Dom João II, 52, Piso 0, 1990-096 Lisboa, Portugal, operates astronotes.eu and is the data controller. You can reach us at privacy@astronotes.eu.
2. What we store
Your notes, titles and tags are encrypted on your device, and we cannot read them. We keep in readable form only:
- Your handle, and your email address if you add one.
- A one-way hash of your login credential.
- Each note's size, timestamps, members and their roles.
- Hashed session tokens and subscription status.
- Feedback you send, to relay it to us and count it against your yearly allowance.
- The sender and time of each command bridge transmission. Transmissions are encrypted and cannot be edited or deleted. We never hold their key, though the server decides membership, so we could in principle be handed one.
- Server access logs with IP addresses.
3. Legal bases
- Notes, sync and sharing: our contract with you (GDPR Art. 6(1)(b)).
- Orbit billing: contract and legal obligation (Art. 6(1)(b) and 6(1)(c)).
- Security logs and abuse prevention: our legitimate interest in a safe service (Art. 6(1)(f)).
- Notices to us of new accounts and Orbit starts, with only the handle or account ID, plan and time: our legitimate interest in running the service (Art. 6(1)(f)).
We do not profile you, sell data or show advertising.
4. Processors and transfers
Stripe, Maileroo, New Relic and Mux each work under a data processing agreement.
| Provider | Purpose | Location and safeguards |
|---|---|---|
| Hetzner Online GmbH | Hosting | Germany |
| Stripe | Payments and invoices. We never see card numbers | US, EU-US Data Privacy Framework |
| Maileroo Group Pty Ltd | Transactional email | Australia, data stored in the EU, Standard Contractual Clauses |
| New Relic, Inc. | Monitoring, never note content | US, EU-US Data Privacy Framework |
| Mux, Inc. | Tour films, only when you press play | US, EU-US Data Privacy Framework, Standard Contractual Clauses |
5. Retention
| Data | Kept |
|---|---|
| Account and encrypted notes | Until you delete them |
| Sessions | 30 minutes idle, 30 days at most |
| Security logs (IP addresses) | 30 days |
| Error diagnostics | 30 days |
| Deleted-note stubs (ID only) | Up to 90 days |
| Feedback messages | 400 days, or until account deletion |
| Outgoing emails | 30 days |
| Notices to us of new accounts and Orbit starts | In our email account, without the 30-day limit |
| Command bridge transmissions | 30 days. The sender is removed when their account is deleted |
| Database backups (encrypted) | Up to 30 days, rotating (oldest removed first once backups reach 2 GB) |
| Erased account IDs, so a restore erases them again | Until every older backup is removed, plus one day |
| Invoices (at Stripe) | As tax law requires |
6. Your rights
- Access, export and portability: you can download every note as pure text from the app menu.
- Rectify: you can change your handle, email or password in Account settings.
- Erase: you can delete your account in Account settings. This destroys your data at once and cancels any subscription.
- Restrict or object to processing based on legitimate interest.
- Complain to the CNPD in Portugal, or the authority where you live.
7. Cookies
Astro Notes sets no cookies. Local storage holds only what the app needs to work. Your browser talks only to our server, except for the tour films. When you press play, Mux receives your IP address, user agent and playback requests, never your account or notes, under its privacy policy.
8. Security and breaches
Our measures are on Product Security. If a breach affects your data, we will notify the supervisory authority and, where required, you, under GDPR Articles 33 and 34.
9. Children
Astro Notes is not directed at children under 16.
10. Changes
We announce material changes in the app before they take effect.