ASTROHACKER

Privacy Policy

Privacy Policy

Effective date: July 25, 2026

Astrohacker Inc. (“Astrohacker,” “we,” or “us”) respects your privacy. This policy describes what information we collect when you use our websites and account services (the “Service”), how we use it, and your choices. It should be read with our Terms of Service.

1. Who We Are

Astrohacker Inc. is a company based in Austin, Texas, USA. We build software and infrastructure under the Astrohacker brand, including our public website and related account features.

2. Information We Collect

Depending on how you use the Service, we may collect:

Account and identity

  • Handle / local name and product domain (for example, name@astrohacker.com) when you register
  • Public cryptographic keys associated with your account
  • Encrypted private key material you choose to store with us (ciphertext only; we design the Service so your password-derived secrets stay client-side where applicable)
  • A hash used for login verification (not your plaintext password)
  • Timestamps such as account creation, updates, and terms-acceptance records when we implement them

Sessions and security

  • Session tokens (stored as secure cookies; we store token hashes server-side where applicable, not the raw secret in plaintext databases where designed that way)
  • Proof-of-work challenge metadata (targets, solutions, signatures, expiry) to prevent spam and abuse
  • Security-related request metadata reasonably needed to protect the Service (for example origin checks on sensitive actions)

Technical and usage data

  • Standard web logs (IP address, user agent, timestamps, request paths)
  • Cookies or similar technologies required for sessions and basic site function

Content you submit

  • Blog comments are not a core feature today; if you email us or submit forms, we process that content to respond

We do not intentionally collect your password in plaintext. Client-side crypto is designed so encryption keys derived from your password need not be sent to us.

3. What We Do Not Collect (by design)

Where the product implements client-side key derivation:

  • Your password as plaintext
  • Your encryption key in usable plaintext on the server
  • Private keys in plaintext (only encrypted blobs, if stored)

4. How We Use Information

We use information to:

  • Provide and maintain accounts, sessions, and the website
  • Authenticate you and protect against abuse (including PoW)
  • Operate, debug, and improve the Service
  • Comply with law and enforce our Terms
  • Communicate about the Service when you contact us or when necessary for security

We do not sell your personal information.

5. Cookies and Similar Technologies

We use cookies (including secure session cookies) to keep you signed in and to protect account actions. You can control cookies in your browser; disabling them may prevent login or other features from working.

6. Sharing

We may share information with:

  • Infrastructure providers (hosting, databases, CDNs) that process data on our instructions to run the Service
  • Professional advisors or authorities when required by law or to protect rights and safety
  • A successor if we are involved in a merger, acquisition, or asset sale (you would be notified as required by law)

We do not sell personal information to advertisers.

7. Data Retention

  • Saved accounts and associated key material are retained until you delete them or we close the account under our Terms
  • Unsaved / temporary accounts may expire automatically after a limited period
  • Sessions expire and are cleaned up on a schedule
  • PoW / abuse records may be retained as needed for security
  • Server logs are retained for a limited operational period

8. Security

We use industry-reasonable measures such as encryption in transit (HTTPS), secure cookie flags where applicable, hashed session material, and restricted server access. No method of transmission or storage is 100% secure.

9. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. You can:

  • Delete an unsaved account through the product flow where offered
  • Request account deletion or privacy questions via the contact methods on astrohacker.com

If you lose your password, we may be unable to recover encrypted data even if we delete account records.

10. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children.

11. International Users

We may process data in the United States and other countries where we or our providers operate. By using the Service, you understand that information may be transferred to those locations.

12. Changes to This Policy

We may update this Privacy Policy by posting a new version on this page and updating the effective date. Continued use after changes means you accept the updated policy.

13. Contact

Astrohacker Inc.
Austin, Texas, USA

Privacy questions: via astrohacker.com or the contact methods published on our website.