Privacy Policy

Effective May 28, 2026.

This Privacy Policy describes how LowEarth (“LowEarth,” “we,” “us”) collects, uses, and shares information when you visit lowearth.app or subscribe to our email alerts.

Who we are

LowEarth is operated as a sole proprietorship by Brian L. The operator can be reached at hello@lowearth.app. We are based in the United States.

Information we collect

We deliberately collect the minimum information needed to run the service.

• Newsletter signup data — when you subscribe to pass alerts, we collect your email address and, optionally, your selected city (to compute when satellites pass overhead from your location).
• Push notification subscriptions — if you opt in to browser push notifications, we store the subscription endpoint your browser provides (an anonymous URL) along with your alert preferences. We never receive personally identifying information through this channel.
• Server logs — like virtually every web service, our hosting provider (Vercel) records standard HTTP request logs (IP address, user agent, requested URL, response code) for ~24 hours for security and debugging purposes. We do not aggregate or analyze this data.

We do not collect: payment information (we don't charge for the core service), precise location data (we use your selected city name only), advertising identifiers, or any data from cookies beyond what is described below.

How we use information

• To send you the alerts and emails you signed up for.
• To compute pass predictions specific to your city.
• To debug technical issues with the service.
• To send periodic updates about LowEarth (newsletter), which you can unsubscribe from at any time.

We do not use your information for advertising profiling, do not sell your information, and do not share it with data brokers.

Third-party services

To run LowEarth, we use a small set of third-party services. Each receives only the minimum information needed:

• Resend (email delivery) — receives your email address and the email content. Resend privacy policy.
• Supabase (database) — stores subscriber records. Hosted on AWS in the United States. Supabase privacy policy.
• Vercel (hosting and CDN) — serves the website and processes HTTP requests. Vercel privacy policy.
• CelesTrak, Wikipedia, Wikidata, Wikimedia Commons, TheSpaceDevs, NASA NSSDCA — public data sources we ingest from. We do not transmit any user data to these services.
• Mediavine — when we exceed 1,000 monthly sessions, we may serve display advertising via Mediavine. If this is active, an additional cookie disclosure will appear and Mediavine's privacy practices apply. Mediavine publisher privacy.

Cookies and tracking

We do not run any tracking analytics, marketing pixels, or user-behavior recording. The only cookies set by LowEarth itself are essential session cookies (none currently). If we later add Mediavine advertising, that integration may set ad-related cookies — at that point an opt-in/opt-out banner will appear.

Your rights

You have the right to:

• Access the information we hold about you (email, city, alert preferences).
• Correct inaccurate information.
• Delete your account and all associated information (unsubscribe link in every email + email us at hello@lowearth.app).
• Export your data (we'll send a JSON export within 7 days of request).
• Unsubscribe from emails (link in every email; takes effect immediately).

If you are in the European Economic Area, United Kingdom, or Switzerland (GDPR)

The legal basis for processing your information is your consent (when you sign up for emails) and legitimate interest (to operate the service and respond to inquiries). You may withdraw consent at any time by unsubscribing or contacting us. You may also lodge a complaint with your local data protection authority.

If you are in California (CCPA)

We do not sell your personal information and have not sold any personal information in the preceding 12 months. You have the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising these rights.

Children's privacy

LowEarth is not directed at children under 13 and we do not knowingly collect information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

International data transfers

We are based in the United States and process information on US-based servers (Vercel + Supabase, both AWS US regions). If you access LowEarth from outside the United States, your information will be transferred to and processed in the United States.

Data retention

• Newsletter subscriber records: retained while you are subscribed + 30 days after unsubscribe, then deleted.
• Push subscriptions: retained while active; auto-deleted when the browser invalidates the subscription.
• Server logs: retained ~24 hours by Vercel, then automatically deleted.

Security

We use industry-standard encryption (TLS for transport, encrypted at rest) and limit access to subscriber data to the operator. No system is perfectly secure, but we have not had any data incidents to date and will notify affected users within 72 hours of becoming aware of any incident.

Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to active subscribers and posted on this page with an updated effective date. Continued use after a change constitutes acceptance.

Contact

Questions, requests, or complaints: hello@lowearth.app.