Privacy Policy

Last updated: August 3, 2026

Rocket Anatomy ("we," "us," "our") operates rocketanatomy.com. This page explains what information we collect, why, and what choices you have. It's written in plain language on purpose — if anything is unclear, email us at the address at the bottom.

Information we collect

• Account information. When you sign in with email/password or Google, we receive your email address and (for Google) your name. Supabase, our authentication provider, handles the sign-in process itself.
• Profile information you choose to add. Username, bio, favorite rockets, and a profile picture — all optional, all editable or removable by you at any time.
• Community messages. Anything you post in the community chat is stored so the conversation persists, and is screened by automated moderation before publishing (see "Automated moderation" below).
• Newsletter subscription. If you subscribe to the weekly space news briefing, we store your email address and a unique unsubscribe token. Nothing else is required to subscribe.
• Saved designs and projects. Anything you build and save in Design Studio or elsewhere is stored under your account so you can come back to it.
• Chat with Super Rocket Buddy (our AI tutor). Your questions are sent to an AI model to generate a response. We do not permanently store this conversation history on our servers — it lives only in your browser for the current session.
• Basic technical data. Standard web request information (IP address, browser type, timestamps) is processed by our hosting provider, Cloudflare, for security and reliability — this is infrastructure-level logging, not something we separately collect or sell.

What we don't do

• We don't sell your personal information to anyone.
• We don't run third-party advertising trackers on this site.
• We don't share your community posts or profile with anyone beyond what you've made public yourself (a public profile, a public community message).

Who we share data with

We use a small number of service providers to run the site, each only for the specific job listed:

• Supabase — authentication (email/password and Google sign-in)
• Cloudflare — hosting, our database, bot/spam protection (Turnstile), and the AI model behind Super Rocket Buddy and content moderation
• Resend — delivering the weekly newsletter email, if you've subscribed
• Google — only if you choose "Sign in with Google"

We don't hand your data to anyone outside of what's needed to run these specific features.

Automated moderation

Community messages and profile pictures are automatically screened (a link/profanity filter plus an AI safety check) before they're published, to keep the community safe. This screening happens on submission; flagged content is not published.

Cookies

We use a small number of functional cookies: to keep you signed in, to remember your theme (light/dark) and language preference, and — for visitors who haven't signed in — a device token so a demo session can't be shared across different browsers. We don't use advertising or cross-site tracking cookies.

Your choices

• Edit or delete your profile information at any time from your account settings.
• Delete any community message you've posted.
• Unsubscribe from the newsletter with one click, using the link in every email we send.
• Request deletion of your account and associated data by emailing us — see below.

Children's privacy

Rocket Anatomy is not directed at children under 13, and we ask that anyone under 13 not create an account without a parent or guardian's involvement. If we learn that a child under 13 has provided us personal information without parental consent, we'll delete it. If you're a parent or guardian and believe your child has provided us information, please contact us.

Note for schools and organizations: if you plan to deploy Rocket Anatomy for students under 13, please contact us first — that use case requires additional data-handling arrangements (e.g., under COPPA) beyond what's described in this general policy.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we remove your profile and personal data within a reasonable time, except where we're required to retain something for legal or security reasons.

Security

Data is transmitted over encrypted connections (HTTPS), and sensitive credentials (like API keys) are stored encrypted, never in plain text. No system is perfectly secure, but we take reasonable, standard precautions.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of the site after a change means you accept the updated policy.

Contact us

Questions about this policy, or want your data deleted? Email sg25editz@gmail.com.

This policy is provided for transparency and is not a substitute for legal advice. If your use case involves handling data from minors at scale (e.g., school deployments) or operates in a jurisdiction with specific requirements (GDPR, CCPA, etc.), consult a lawyer to make sure this policy — and our actual practices — meet those requirements.