Privacy Policy

The Short Version

• This page is about the website, app.openhangar.space. The Open Hangar extension works without it and has its own (Extension Privacy Policy): nothing leaves your browser unless you connect it to an account here. Once connected, it syncs after every successful scan.
• We keep what you sync, what you choose to share, and what it takes to run your account. Nothing else.
• Your hangar is private. You can choose to show your ships to your org, or a small public profile to everyone. Both stay off until you turn them on.
• No ads. We count visits with Cloudflare Web Analytics, which uses no cookies, and with Google Analytics on openhangar.space's public pages, which you can turn off (in Europe we ask first). Neither ever sees your hangar or account.
• We don't sell your data.
• You can download everything we have about you, or delete it all, any time from your Account page. Accounts unused for 24 months are deleted, with email warnings first.

Who We Are

Open Hangar is run by Draco Foundry, LLC, an Alaska company (details on the Legal Notice). Questions about your data go to support@openhangar.space.

What We Store

Your Account

• Your email address, and whether you've confirmed it.
• Your password, only as a one-way hash. We can't read it.
• If you turn on two-factor sign-in: its key and backup codes, encrypted.
• If you sign in with Discord: your Discord user ID, display name and email. We don't keep Discord's sign-in tokens. If you sign in with Discord, we also check whether you have the Beta Tester role in our Discord server, only to unlock beta access. We don't store your other roles or servers.
• Each signed-in browser: when and how it signed in (for example, password and code, or Discord), its IP address and its browser name (the "user agent"), so sessions work and you can spot ones that aren't yours.
• Badges you've earned on Open Hangar (like Founding Tester), and when.
• If you prove an RSI handle: which handle, and when it was proven. To check, we read that handle's public RSI page each time you press Check My Bio. We don't keep your bio.

What You Sync

Once you connect the extension, it syncs after every successful scan and sends the same data as its backup file. We keep the latest copy for each RSI account you sync:

• Your hangar: each pledge with its name, date, value, insurance and contents (ships, CCUs, add-ons and more), whether it's giftable or meltable, its RSI link and pictures, and RSI's ids for its ships and store items.
• Your buy-back pledges, each with its name, date, price, insurance and what is inside it, its RSI link and pictures, and RSI's ids for its ships and store items.
• Your pledge archive: up to the newest 2,000 pledges that have left your hangar (melted, gifted or upgraded away), with their id, name, value, insurance, contents and dates. We store it with your synced hangar.
• Your RSI identity as the extension saw it: handle, display name, the web address of your RSI portrait, UEE Citizen Record number, enlisted date, country, main org (name, tag and logo address) and rank, whether you're a subscriber (with your tier and billing period, as RSI shows them), your Concierge level and how close you are to the next one, balances (Store Credit, UEC, REC and Buy-Back Tokens), and when the extension read them. The Citizen Record number is the public number on your RSI profile. It never changes, so we use it to recognise your RSI account: if you change your handle, you keep the same account and history.
• Your referrals, if you've scanned them: how many recruits and prospects you have, and each recruit's enlisted and converted dates and referral campaign. We don't keep your recruits' handles, names or pictures. Your referral code is never sent.

From each sync we also keep a history: which pledges were added, removed or changed, and one value point per day for the charts.

Each connected extension has a name (like "Chrome on Windows"), its version, and the dates it connected and last synced. Its token is stored only as a hash.

We never receive your RSI password or RSI cookies, and the extension never sends payment details, addresses or card numbers. Add to RSI Cart and Send to RSI Cart work through the extension in your browser and go straight to RSI. Nothing about them comes to us.

What You Create Here

• Fleets you build in My Fleets, and the labels and notes you add to your ships and pledges (like a ship's fleet status, assigned paint or location, or a note on a pledge). They're private to you and stay with your account until you change or delete them.
• Your Wishlist: the ships and items you save, and whether you want a reminder for each. It's private to you. A connected extension can use it too: it reads your Wishlist to show it in its popup and match its store alerts, and sends us each change you make there: an item added or removed, or a reminder turned on or off. It uses that extension's token, and nothing else about you comes with it.
• Your settings: the choices you make on the website, like your currency, layouts, saved views and sorts, the ships and store items you're comparing, appearance and time zone, your Recommendations choices, and the notices and cards you've closed. For a closed Melt and Rebuy card, we keep only a code that tells which card it was. Your settings are private to you and follow you to any browser where you sign in.
• Your Haul: the store items you've picked to send to your RSI cart, how many of each and when you added them, how you'll pay for each (cash or store credit), and which order is next when it goes in more than one. It's private to you and follows you to any browser where you sign in.

What You Choose to Share

• Sharing with your org: your choice for each RSI account (Off, Anonymously or By Name) and every change to it, with its time. That's our record that you said yes.
• While you share: each shared ship's name, whether it has LTI, and the paint you assigned to it in Ship Details. We also keep the ships you keep back, so they stay back. We never share values, pledges, upgrades, buy-backs or store credit.
• Your main org: its name and ID, your rank in it, and when we last checked. We read these from your handle's public RSI page through our relay when you prove the handle and when you open the Sharing page. While you share or show a public profile, we also read them after your syncs (at most every 6 hours) and when you open your org's page. We keep nothing else from the page.
• Your public profile: what you pick to show on it. From your public RSI page we also read the address of your picture and the year you enlisted, and keep only those and when we read them. While your profile shows your picture, we keep a copy of it in our own storage and delete it within about 10 minutes after it stops showing.
• Your age confirmation: when you turn on a public profile or sharing by name, that you confirmed you're 18 or older, and when.
• Reports: if you report a profile, the reason, the time, your account and which profile. The pilot you report is never told who reported them.
• Our moderation record: each time we hide a profile, show it again, turn off an account's sharing, let it share again or close a report, with the reason and the time. Hiding a profile deletes nothing.

Why We Store It

To run the account you asked for: signing you in, keeping your hangar and its history, and showing it back to you.

IP addresses, browser names and failed attempts are also used to keep accounts safe and to stop abuse (rate limits, spotting a session that isn't yours).

When you ask us for help with your account, we can look it up by its exact email address. We see its status and beta access, whether its email is confirmed and two-factor sign-in is on, when it was created and last signed in, your linked RSI handles (whether each is proven and when it last synced), and your connected extensions (version, last sync and last seen). We don't see your hangar, wishlist, settings or password there. Before we change anything, we check the request came from your account's email address. Then, as you ask, we can resend your confirmation email, turn off two-factor sign-in so you can set it up again, disconnect your extensions, or delete your account.

We don't use your data for anything else, and we don't build profiles or show ads.

Legal Bases (EU and UK)

If you're in the EU or the UK, these are our legal reasons for each use:

• Your account, sync, and the emails that come with them (including inactive-account warnings): needed to give you the service you asked for (contract).
• Security, rate limits and stopping abuse: our legitimate interest in keeping accounts and the site safe.
• Helping with your account when you ask: needed to give you the service you asked for (contract).
• Your referrals: our legitimate interest, and yours, in showing you your own referrals. We keep only counts, dates and referral campaigns, and never show them to anyone but you.
• Sharing with your org and your public profile, and reading your org and rank for them: your consent. Turn either off any time.
• Reports and the moderation record: our legitimate interest, and other pilots', in keeping public profiles and org pages free of abuse.
• Google Analytics in Europe: your consent. You can take it back any time under Analytics below.
• Cloudflare Web Analytics: our legitimate interest in counting visits without cookies or identifying anyone.
• Anything the law requires us to keep or hand over: legal obligation.

Who Else Handles It

• Cloudflare hosts the site and stores its database, synced hangars and backups. It also runs Turnstile, the "are you human" check on sign-up, sign-in and password reset, which looks at your browser (not your account) to tell people from bots. Cloudflare runs data centers worldwide, so your data may be processed outside your country, including in the United States.
• Resend sends our account emails (confirm your email, reset your password, inactive-account warnings). It gets your email address and the email itself.
• Amazon Web Services runs our relay, a small server all our requests to RSI go through: the store and its pictures, the Ship Matrix, RSI's news, Spectrum, roadmap, help and funding pages, and the public page and picture of a handle you're proving or have proved. It passes each one on and keeps none of them.
• Discord, only if you choose to sign in with Discord.
• Cloudflare Web Analytics counts visits to openhangar.space: pages viewed, the site you came from, country, and browser and device type. It uses no cookies or local storage and doesn't fingerprint you or follow you across sites, so it can't tell who you are.
• Google Analytics (Google LLC), on openhangar.space's public pages only, never on account, sign-in or hangar pages. See Analytics below.

Each of these works for us under its own data processing terms. When your data leaves the EU or the UK, it's covered by the EU-US Data Privacy Framework (and its UK extension) or by the standard contractual clauses in those terms.

Some pages also show pictures or videos straight from other sites. Your browser fetches them itself, so those sites see your IP address and browser, as any website does. We don't send them anything about you.

• Roberts Space Industries: the pictures of your pledges and ships in My Hangar and on our hangar page.
• YouTube (Google): video thumbnails on the news page, and the video player only once you press play. The player is YouTube's privacy-enhanced version.

We only share data with others if the law makes us, or if you turn on sharing:

• With your org: Open Hangar members whose proven handle RSI shows in the same main org see the ships you share. By name, your handle and rank show with them. Anonymously, your ships count only in totals, and only once 3 or more members share that way. A rare ship can still point to you.
• Your public profile: anyone with its address sees what you picked to show. The address is made from your handle. We ask search engines not to list it.

Nothing else about you is made public.

Our pages link to Ko-fi and Patreon, where you can choose to support Open Hangar. They're plain links: nothing loads from those sites until you click one, and we don't tell them who you are. If you give through them, Ko-fi or Patreon handles your payment under its own privacy policy, and we see only what it shows creators, such as your name, email and the amount. We use that only to thank you and to count donations. Where The Money Goes shows monthly totals only, never who gave.

Cookies

A sign-in cookie that keeps you signed in, a small note that you're signed in so openhangar.space can show My Hangar (it holds no sign-in itself), and one that remembers light or dark mode if you switch.

Cloudflare may add a security cookie to stop bots.

On openhangar.space's public pages, Google Analytics sets its cookies (_ga and _ga_*) when it's on, and one cookie (oh_ga) remembers whether you allowed it.

While the closed beta lasts, one cookie (oh_invite) remembers the invite code you used. Signing in also sets two short-lived helper cookies: one that speeds up pages for a few minutes, and one that holds a two-factor sign-in in progress.

The site also keeps a few settings in your browser's local storage, like how you like the store laid out, your currency, the ships you're watching or comparing, and notices you've closed. Signed out, they stay in your browser. When you're signed in, they're also saved with your account (see What You Create Here).

No advertising cookies.

Your Haul (the store items you pick to send to your RSI cart) is saved in your browser, not as a cookie. When you're signed in, it's also saved with your account, so the same Haul shows wherever you sign in. Items leave it once RSI adds them to your cart, or when you remove them.

If you dismiss a Melt and Rebuy card, it stays hidden. When you're signed in, we remember that with your account. Otherwise your browser remembers it on this device.

How Long We Keep It

Analytics

Google Analytics tells us which public pages are visited, roughly where from (country and city), the site that sent you, your browser and device, and what you click on the page. It uses cookies and a random ID, not your name, email or anything from your hangar.

Google processes this for us under its data processing terms and may handle it in the United States. We have Google's data sharing for its own products and its ad features turned off.

If you're in Europe, Google Analytics stays off until you allow it. Elsewhere it's on unless you turn it off here, or your browser sends Global Privacy Control, which we treat as off.

Google Analytics for this browser: OffAllow AnalyticsTurn Off Analytics

Your Choices and Rights

• Download all your data as a JSON file: Account, then Your Data. It includes the reports you sent, and any about your profile without who sent them. It also lists what we did on your account when helping you, and when.
• Delete your account: Account, then Self-Destruct. Your account, RSI accounts, synced hangars, pledge archive, history, fleets, labels and notes, sharing choices and shared ships, your public profile, reports you sent or that name your profile, and connected extensions are removed right away. Backups roll off within 90 days; until then we keep only your account's random ID and the date (for at most 104 days), so restoring a backup can't bring your account back.
• Disconnect an extension any time, on the Account page.
• Turn off sharing with your org, or your public profile, any time on the Sharing page.
• Fix something we have wrong, or ask anything else: email support@openhangar.space. We'll answer within 30 days, usually much sooner.

Depending on where you live (for example the EU, the UK or California), the law gives you rights over your data: to see it, correct it, delete it, take it with you, or object to how it's used. Everything above is how you use them here. If you think we've got something wrong, tell us first; you can also complain to your local data protection authority.

Keeping It Safe

Everything travels over HTTPS. Passwords are hashed, two-factor keys are encrypted, extension tokens are stored only as hashes, and sign-ins are rate limited. Backups sit in private storage.

If something ever goes wrong that puts your data at risk, we'll email the people affected as soon as we know what happened, and post about it on our Discord.

If Open Hangar Shuts Down

If Open Hangar or this website ever shuts down, we will:

• Email every account holder at least 60 days before it closes.
• Keep Download Your Data working until the last day.
• Then delete every account and all synced data. Backups roll off within 90 days after that.

Nothing is sold or handed to anyone else as part of a shutdown. The extension keeps working on its own, since it never needed the website, and the data in it stays on your device.

If Open Hangar is ever transferred to someone else, we'll email you before it happens, and you can delete your account first. Whoever takes it over has to keep to this policy for the data you already gave us.

Children

Accounts are for people 13 and older, or older where your country requires it (16 in some EU countries). If you think a child has made an account, email us and we'll delete it.

The News Front Page

The front page at openhangar.space gathers public Star Citizen news from Roberts Space Industries. We use automated tools, including AI from Anthropic, to summarize and tidy up RSI's public posts. Those tools only ever see RSI's public text, never anything about you, and every summary links back to RSI's original post.

Changes

If we change this policy, the date at the top changes. For anything that changes what we store or who handles it, we'll let account holders know by email before it takes effect.