Privacy
Last updated 15 September 2026
Who this covers
This policy covers altnautica.com, the hosted ground station at command.altnautica.com, the documentation site, and the investor portal on this domain. It does not cover a deployment of our software that you run yourself, because we have no access to it and no channel into it.
COLLECTED
What we actually hold
- Page analytics
- aggregate, no cookies
- Contact form
- name, email, message
- Investor account
- email, password hash
- Session
- one auth cookie
- Server logs
- request metadata
Analytics
This site loads one self-hosted, cookieless analytics script that records page views, referrers and coarse device class in aggregate. It sets no cookies, builds no cross-site profile, and does not identify you. We use it to see which pages are worth writing more of.
Forms
The contact form and the investor access request store what you typed, so we can reply. That is the only reason they exist. We do not buy, sell, rent or enrich contact data, and we do not add you to a mailing list because you asked a question.
Accounts
The investor portal uses email and password authentication. The password is stored as a hash, never in plaintext, and the session is a single HTTP-only cookie. Portal pages are gated on the server, and the data behind them is additionally gated by role in the backend, so an authenticated account without the right role sees nothing.
NOT COLLECTED
What we deliberately do not do
No product telemetry
Mission Control does not phone home. It reports no usage, no feature analytics and no crash data to us. The agents do not either: the on-box log store is on the box, and pushing any of it anywhere is an explicit operator action.
No flight data
We never see your telemetry, your video, your missions or your logs unless you deliberately connect a node to a fleet cloud we host and choose what to send. Self-host the fleet stack and that path does not exist at all.
No advertising or tracking
No advertising pixels, no third-party tag manager, no session recording, no fingerprinting, no cross-site identifiers. The analytics script is the only third-party script on the page.
COOKIES
Two, and one of them is your theme
Signing into the investor portal sets one authentication cookie, which is what keeps you signed in and is removed when you sign out. Your light or dark theme preference is stored locally in your own browser and is never sent to us. There is no advertising cookie and therefore no cookie banner, because a banner for two functional items would be theatre.
RETENTION
How long, and how to end it
Form submissions are kept while the conversation is live and for as long as we have a business reason to keep the thread, then deleted. Account records last until the account is deleted. Analytics data is aggregate and holds nothing to delete. Server request logs roll over on a short cycle.
To see what we hold about you, correct it, or have it deleted, email us from the address in question and say so plainly. We will do it and confirm. You do not need to cite a regulation and we are not going to make you use a portal.
Data lives with the infrastructure providers that host this site, the backend and the email we send. We do not transfer personal data to anyone for their own purposes.
CHANGES
If this page changes
The date at the top is the only version marker, and a material change gets a new date. If a change affects what we collect rather than how we describe it, we will say so on this page rather than quietly reissue it.