The short version
Assets and projects stay on your computer by default, and rendering happens locally. We handle only the information needed to provide accounts, favorites, feedback, and invite stats.
1. What we process
| Scenario | Information | Purpose |
|---|---|---|
| Signup and sign-in | Email, salted password hash, verification codes, sign-in times, and device identifiers | Account security and device sessions |
| Cloud Library | Component downloads and favorite records | So your favorites look the same on another device |
| Feedback | The summary, details, type, contact email, and app version you enter | To diagnose the issue and reply |
| Invite codes | Invite code, visit counts, signup and subscription results, and reward records | To measure invites and issue rewards |
Passwords are stored as hashes, never in plain text. We don't read the project files or asset contents on your computer.
2. What we don't do
- We don't upload your assets or projects to a server (unless you choose to use the cloud Library or the AI assistant).
- We don't collect other files from your device without your knowledge.
- We don't sell your personal information or add your email to any marketing list.
3. Third-party services
The site and the app rely on the infrastructure below, each handling the necessary technical data under its own policy:
- Cloudflare: hosting and delivery for this site. It keeps standard access logs (IP, User-Agent, and similar) to prevent abuse.
- Supabase: storage for accounts and cloud data.
- GitHub: the open-source repository and releases. The Star count on the home page comes from GitHub's public API.
- Email service: sending verification and notification emails.
4. Retention and deletion
- Account information is kept while the account is active and is deleted or anonymized after you close it.
- Feedback records are kept for the minimum period needed for issue tracking and auditing after you delete them or close your account.
- Server access logs are retained under the infrastructure providers' policies.
5. Your rights
You can contact us to look up, correct, or delete your account information, or ask for an export of your account data. Email support@orbitapp.top, and we usually reply within 2 business days.
6. Cookies and local storage
This site uses browser local storage to remember your sign-in state, interface language preference, and invite code (kept for 30 days). That data lives only in your browser and goes away when you clear browser data. We don't use third-party advertising cookies on this site.