Privacy Policy

Asteriox is a prototype for exploring spacecraft telemetry and anomaly investigations and saving operator assessments. This notice covers www.asteriox.com, app.asteriox.com and api.asteriox.com.

Jude Nimo operates Asteriox and is responsible for your personal information. Contact hello@asteriox.com with privacy questions or requests.

Information and purposes

When you sign in with Google, we receive your Google account identifier, verified email address and basic profile information, such as your name and profile image. We use these to authenticate you, maintain your session and associate saved reviews with your account. We request OpenID, email and profile permissions. We do not receive your Google password or request access to Gmail, Drive, Calendar or your contacts.

If you save an assessment, we store your account identifier, investigation and analysis version, assessment, further-investigation choice, selected useful channels, notes and submission time. Please avoid putting sensitive information or information about other people in notes.

The service processes connection and request information needed to deliver and secure pages and API responses. Diagnostic logs can contain request paths, timestamps, connection information and errors. OAuth sign-in request URLs are excluded from stored application request logs. We do not deliberately log passwords, session cookies or OAuth secrets.

We use authentication and security cookies, including a host-only, encrypted session cookie on app.asteriox.com. Your browser also stores dashboard display preferences. The application does not include advertising trackers or third-party analytics code.

The current prototype uses the public ESA-ADB dataset. It does not provide a feature for uploading users' own spacecraft telemetry.

We process information to provide the prototype and requested assessments, secure and maintain it, answer privacy or support requests, and evaluate operator feedback. Our lawful basis for providing and securing the prototype is our legitimate interest in operating and evaluating the service, balanced against your rights. Where applicable, we process information to comply with legal obligations.

Access and service providers

The application isolates reviews by account. Administrators can access the systems and records when needed for operation, support, security or handling your requests.

Application hosting, compute, review storage, telemetry storage, backups and secrets use Google services. Reviews and application compute are located in Google's London region. Firebase Hosting uses Google's global network to deliver public pages and route requests. Google sign-in and some platform administration services operate globally. Private review responses are not configured for public caching. Google processes information under its service terms and privacy policy.

We do not sell your personal information. We may disclose it if legally required.

Retention

Saved reviews are available for 30 days from submission. The service hides expired reviews and a daily London job removes them from the live database. Daily backups are retained for seven days; deleted backup objects can remain recoverable for a further seven days. A review that expires from the live database can therefore remain in restricted backups for up to 14 additional days. Backups are used for recovery and are not exposed through the application.

Sessions expire after seven days. Application diagnostic logs are retained for 30 days. Google may retain its own security and administrative records under its applicable policies. Public telemetry and derived analysis contain dataset information and have separate operational retention.

Your choices and rights

You can choose not to sign in. The public investigation demo remains available without an account. Sign-in information is needed to use the protected dashboard and save reviews.

Depending on the applicable law, you may request access, correction, deletion, restriction or portability of your information and object to processing based on legitimate interests. Email hello@asteriox.com. We may need to verify your identity before acting on a request. You may also complain to the UK Information Commissioner's Office.

We will update this notice if the service or its handling of information changes.