Privacy
Exo-View (exo-view.com) is run by Daniel Noam Tuby (imtuby.com), in Israel (“we”). It is free, and all of it can be used without an account. If you want to keep what you make, you can sign in: with Google, or with a link sent to your email. This page says what we keep about you, why, who else handles it, and how to have it removed. Questions and requests: hello@exo-view.com.
In your browser
Your current view and index live in the page's address, and your language is the address's too (the app is at exo-view.com/atlas/ in English and exo-view.com/he/atlas/ in Hebrew). Your browser remembers a few things for you: your country, which panels you folded, which map layers you keep on, which music you chose, your picture quality (Auto or High), which clock you chose (UTC or your country's time), the places you saved, whether you have seen the gesture hint, which invitations to sign in you have already seen and when (so they do not keep coming back), the day this browser was last counted (below), and, once you sign in, a sign-in token so you stay signed in. When you are signed in, your country, folded panels, map layers, music, picture quality, clock and saved places are also kept on your account; the rest stay on your device. Exo-View has no advertising and no tracking, and serves its own fonts rather than loading them from another company. It has one anonymous count of readers, and nothing more: the first time a browser opens the atlas, and again on each later day it does, the page tells our database (Supabase) a single word, “new” or “back”, with no ID, no cookie and nothing from your browser's memory, and the database adds 1 to that day's total. It keeps no list of readers, so it cannot tell who you are or link two visits. Your browser keeps the date of its last count, only so that it is not counted twice in one day. Supabase, like any server you reach, receives your IP address with that request and may keep it in its own logs; we do not store it in the count. A browser that sends Global Privacy Control is not counted. One exception, and only when you ask for it: when you open a city's or an airport's plate, your browser asks Wikipedia and Wikimedia Commons for its photograph and the first lines of its article. Nothing else about you is sent with the request, but they receive your IP address, as any website you visit does. The Space Station layer asks no one for anything: its place is worked out in your browser from orbital elements that ship with the page, and its model is served from the site itself.
Your account
- With Google: we receive your name, email address, profile picture link and a Google account ID. Nothing else. We never see your Google password.
- Google's button: when the sign-in window opens, your browser loads Google's sign-in button from accounts.google.com, even if you then sign in by email. Google receives your IP address and may use its own cookies; Google's privacy policy covers that.
- With an email link: we receive only your email address, and send a sign-in link to it. There is no password.
- What we store: that account information; the indexes you save: the name you give each one, its indicators and weights, and when you saved it; and your settings: your language, the country you set as yours, which panels you folded, which map layers you keep on, which music you chose, your picture quality, your clock and the places you saved.
- What it is used for: letting you in, writing to you in your language, and showing you your own saved indexes and settings. We do not sell it, share it for advertising, or use it for anything else.
- Why we may: we hold your account data because you asked for an account and it is needed to provide one; the host's request logs serve to run and protect the site.
Who handles it for us
- Supabase runs sign-in and the database that holds your account, saved indexes and settings, and the anonymous daily count of readers.
- Resend delivers the sign-in emails, so it handles your email address and the email itself.
- Cloudflare hosts the site and serves it from its network, and, like every host, keeps routine request logs, such as IP addresses. It also passes on email you send to hello@exo-view.com, so it handles your address and the message on the way.
- Google provides sign-in with Google, as above.
Each handles your data only to provide its service to us. Their servers may be outside Israel, including in the United States and the European Union.
How long we keep it
Your account, saved indexes and settings stay until you delete them. Deleting your account removes them from our database straight away; copies in the providers' backups go when those backups are replaced. Request logs are kept by Cloudflare for its own limited period.
Your rights
Under Israel's Protection of Privacy Law, and under the GDPR if you are in the European Union or the United Kingdom, you can ask to see the data we hold about you, to have it corrected or deleted, to receive a copy of it, and to object to how it is used. You can delete saved indexes and your whole account yourself (below); for anything else, write to hello@exo-view.com and we will answer within 30 days. You can also complain to Israel's Privacy Protection Authority, or to the data protection authority where you live.
Deleting your data
Open “Build an index”, then choose Delete account under your saved indexes. This removes your account and everything saved in it, straight away. You can delete single indexes at any time. If you signed in with Google, you can also revoke Exo-View's access in your Google account settings.
Children
Accounts are for people aged 13 or over. If you are under 13, please do not sign in. If we learn that an account belongs to a child under 13, we will delete it; a parent can ask us to at hello@exo-view.com. Where the law sets a higher age for agreeing to this on your own, a parent must agree for you.
Changes
If we change this page in a way that matters, we will say so on the site before the change takes effect. The date at the top is the last change.
Contact
hello@exo-view.com · imtuby.com · See also the terms of use.