// DATA PRIVACY ARCHITECTURE
OBSERVER PRIVACY PROTOCOL
HONEST & EXPLICIT DISCLOSURE // ZERO AD TRACKING
// 01 WHAT DATA WE STORE AND WHO SEES IT
NOVA operates on strict least-privilege principles. Below is our comprehensive disclosure of every data point collected:
| DATA FIELD | CLASSIFICATION | VISIBILITY LEVEL | PURPOSE |
|---|---|---|---|
| Callsign / Nickname | PUBLIC | Visible to all visitors | Attribution on dispatches, profiles, and follower graphs |
| Full Legal Name | CONFIDENTIAL | Account Owner only | Identity record, never exposed via any public API |
| Email Address | CONFIDENTIAL | Account Owner only | Authentication, password resets, security notifications |
| Password Hash | ENCRYPTED | Server verification only | Salted Bcrypt hash (raw password is never stored or logged) |
| Uploaded Astrophotos | PUBLIC / S3 | Visible upon curation | EXIF & GPS metadata automatically stripped before storage |
| Research Outreach | RESTRICTED | Sender & Agency | Scientific collaboration drafts dispatched to aerospace agencies |
| IP & Audit Telemetry | INTERNAL | Security audit logs only | Brute-force lockout and defense against anomalous requests |
// 02 ZERO THIRD-PARTY AD TRACKING
NOVA does not sell observer information, does not employ invasive advertising trackers, and does not profile users for commercial marketing. All session tokens use HttpOnly, SameSite=Lax safeguards.
// 03 RIGHT TO DELETION & EXPORT
You hold total sovereignty over your telemetry. You may permanently delete your account at any time via your Observer Profile console. Account deletion immediately cascades across all posts, comments, follows, likes, outreach drafts, and purges S3 assets from storage.