Privacy PolicyDraft

Effective date: to be set at launch. This is a plain-language draft provided so the pages exist and are linkable; the final, counsel-reviewed version will be posted before paid plans go live. Questions: contact us.

1. Who we are

overwatch.earth is operated by Tuxxin. This policy explains what we collect when you use the platform and how we handle it.

2. What we collect

Account data: your email, a securely hashed password (scrypt — we never store your password in the clear), and your organisation and globe configurations. Usage data: counts of embed views for billing/limits, and basic request logs. Network data: your IP address is seen by our CDN and servers to deliver the site, as with any website.

3. Cookies

We use a small number of first-party cookies: a session cookie and a CSRF token when you're signed in, and a theme preference. Analytics: our own first-party event pipeline is cookieless and one-way hashes your IP. Google Analytics 4 is additionally loaded once you accept on the globe, and sets its own first-party cookies (_ga, about 13 months); decline and it is never initialised. We set no advertising cookies of our own, we don't sell your data, and we don't run cross-site advertising trackers. Where ads are shown they are non-personalised, but our ad provider may set its own cookies or similar storage for frequency capping, measurement and fraud prevention - see Advertising in the Terms.

4. Third parties (sub-processors)

We rely on: Cloudflare (CDN/DNS/edge), our payment processor (Stripe) for billing, an email provider (MailerSend) and support system (HESK) for transactional and support messages, our advertising provider (Google AdSense), which serves non-personalised ads and may set its own cookies, and the WorldIP.io widget shown in the footer, which queries WorldIP to display your own IP, ISP and approximate location. Live map data is fetched server-side, so your IP is never sent to the data providers.

5. How we use it

To provide and secure the Service, enforce plan limits, process payments, respond to support requests, and improve the product. We don't sell your personal data.

6. Retention

We keep account data while your account is active. Delete your globes any time; contact us to delete your account and associated personal data, subject to records we must keep for legal/accounting reasons.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. To exercise them, contact us.

8. Security

Passwords are hashed with scrypt, traffic is served over HTTPS, and sessions are opaque server-side tokens. No system is perfectly secure, but we take reasonable measures to protect your data.

9. Children

The Service isn't directed at children under 13 (or the minimum age in your jurisdiction), and we don't knowingly collect their data.

10. Changes & contact

We may update this policy and will post changes here. Questions or requests: contact us.