Orbitlas
Privacy
Orbitlas is operated by an individual. The operator is a person, not a limited liability company and not another form of company. Questions and deletion requests go to privacy@orbitlas.com.
What the service holds
You can browse and ask for the first maps without an account. Maps you save before you sign in stay in this browser. A public share link is a page anyone with the address can open. Signing in stores your email, the sign-in provider, and the maps you keep with the account. A private share is available to people with the link and is not listed for search engines.
Age
The service is for adults 18 and over. It is not directed at anyone under 18. The age gate stores your confirmation in a cookie and in local storage on this device so the notice is not shown again. That record is not an account and it is not sent to a model.
Prompts and models
Questions and follow-ups you type are first sent to Cloudflare Workers AI (Meta Llama models run by Cloudflare). If that is unavailable, they go to Google Gemini, called from the server with the operator's key. When you ask for a correction, the current map's title, values and settings are sent along with your follow-up so the model can update it. The question you type is sent to Google for processing when Gemini is used. On Google's free tier, Google may use that text to improve its products. Do not enter personal information. If no Gemini key is configured, the map is drawn from data already on this server and the question is not sent to a model. A key you add under Advanced stays in this browser. It is sent only with that request and is not stored or logged by the operator. Premium models are part of Pro. Search notes from a model provider are discarded and are not saved or published. Every AI answer is labeled with the model name and its sources. Answers can be wrong and are informational only.
What we do not collect
The globe does not locate individual people. It does not build a profile of a private person. Religion and sentiment, when a dataset exists, are aggregates that pass a minimum-count threshold, and those pages ask search engines not to index them.
Processors
The operator uses these processors when the matching feature is turned on:
- Cloudflare, to host the site and deliver it, and to run Workers AI models that answer prompts
- Supabase, to hold accounts and saved maps
- Resend, to send sign-in and share email
- Stripe is listed for a later checkout. Checkout is not open, and this service does not send card or payment details
- Google, to answer an Orbitlas AI prompt when a Gemini key is configured
- The AI provider for a premium model or a key you supply, to answer that prompt
A processor receives only what that feature needs. If a feature is not configured, that processor is not called. The operator does not sell personal information.
Share links
A shared link may include a ref code, a short public label such as x or copy. The service counts how many times each code is opened, by day and by page type: home, map, history, share, or other. The count is an aggregate. It does not store an IP address, a cookie, an account, or any other personal data. Until a Cloudflare aggregate dataset is attached, the count stays in server memory and resets when that process restarts. It is not a profile of a person.
Cookies and local storage
Orbitlas uses no advertising or cross-site tracking cookies and no third-party analytics. It uses only what the service needs to work:
- Cookie orbitlas_age: remembers that you ticked the 18+ and Terms box.
- Local storage orbitlas.age.v1: the same agreement, kept permanently on this device.
- Local storage globe.saved.v1 and orbitlas.watch.v1: maps you saved, including refine choices, and headlines you watch on this device. Free keeps 10 maps. A Pro token on this device (orbitlas.pro.v1) raises that cap. The maps are not uploaded.
- Local storage orbitlas.maps.ok.v1, orbitlas.visits.v1, orbitlas.lastVisit.v1, orbitlas.install.dismissed.v1: counters that decide when to offer the install prompt, and when you dismissed it. They never leave the device.
- Local storage for theme, onboarding, Living History edits and likes, and an optional AI key you add under Advanced.
- Supabase session storage, only once sign-in is switched on and you sign in. If you sign in, your 18+ and Terms agreement is also saved on your account.
Because these are strictly necessary for the features you use, no consent banner is shown. Clear site data in your browser to remove them.
Retention and deletion
Delete a map saved in this browser by clearing site data for this site. Write to privacy@orbitlas.com to delete an account and the maps stored with it. A public share stays available until it is deleted. Sign-in email is kept while the account exists.
Files you map
A CSV, Excel, or GeoJSON file you drop on the globe is read in this browser. It is not uploaded, and it is not stored on the server. Columns that look like personal data, such as a name, an email, a phone number, or a street address, are removed. If the file is only about people, it is refused. A latitude and longitude is not plotted as a person. Those points are combined to a city, and a city is shown only when at least 50 points fall there. The layer is labeled User data, with the file name. It is not a figure published by Orbitlas. A share link can include a picture of that map, rendered on this device. If that picture cannot be made, the page uses a branded card with no map image.
Your rights (GDPR, UK GDPR, CCPA/CPRA)
Wherever you live, you can ask to access, correct, export, or delete personal data the operator holds about you, and to object to or restrict its use. Write to privacy@orbitlas.com; requests are answered within 30 days, and nobody is treated differently for using these rights. If you are in the EU or UK you may also complain to your data protection authority.
Legal bases (GDPR): providing the service you ask for (contract), keeping it safe and free of abuse (legitimate interests), and your consent where a feature asks for it. California residents: the operator does not sell or share personal information for cross-context behavioral advertising, and collects only the categories described above (identifiers such as an email if you sign in, and the content you type).
International transfers
The operator is in the United States, and processors may handle data in the US and other countries. Where required, transfers rely on the processors' standard contractual clauses.
Children
The service is not for anyone under 18. If you believe a child has provided personal data, write to privacy@orbitlas.com and it will be deleted.
Law
This policy is governed by the laws of the State of Delaware, United States, without regard to conflict-of-law rules.
Effective 17 October 2026. Operated by an individual under the laws of the State of Delaware, not an LLC. Contact: privacy@orbitlas.com.
Globe · Sources · Pricing · Privacy · Terms · AI disclaimer · About · Contact