Privacy Policy

UFOCosmos.com is operated by Saboteur LLC. This Privacy Policy explains what we collect, why, and what choices you have. Contact: ufocosmosadmin@gmail.com.

1. What we collect

• Account data. Email, chosen username, hashed password (or OAuth identifier), account creation time.
• Submission data. Files you upload, free-text fields, declared location/time, IP address at submission time, license-acceptance evidence.
• Usage data. Aggregated, cookie-less analytics via Cloudflare Web Analytics. We do not use third-party advertising trackers.
• Bookmarks, collections, notes. Stored against your account, private by default.

2. Why we collect it

• Operate accounts and submissions.
• Moderate content for safety and legality.
• Maintain evidence of license acceptance.
• Measure aggregate site performance.

3. Sharing

We do not sell personal information. We share with service providers (Supabase for database/auth, Cloudflare for hosting/storage, Resend for email) under contractual confidentiality. We may disclose information if required by law or in good-faith belief that disclosure is necessary to comply with a legal process or protect rights and safety.

4. Retention

• Account data: until you delete the account.
• Approved submissions and license-acceptance log: retained as part of the public record.
• Rejected submissions: deleted from public-facing storage within 90 days.
• Backups: rolling 12 months.

5. Your rights

You may request access to, correction of, export of, or deletion of your account data by emailing ufocosmosadmin@gmail.com. We will respond within 30 days. If you are an EU/UK resident, you have the right to lodge a complaint with your supervisory authority. If you are a California resident, you have the rights described in the CCPA, including the right to know, delete, and the right against discrimination.

6. Cookies

We use minimal first-party cookies for authentication and theme preference. No third-party advertising cookies. See Cookies.

7. Children

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. Security

We use HTTPS everywhere, encrypted storage at rest with our providers, and least-privilege access for staff. No system is perfectly secure; we strongly recommend using a unique password.

9. International transfer

Data may be processed in countries outside your own. We rely on standard contractual clauses where required.

10. Changes

We will post material changes here with a new date.