Privacy Policy

Last updated: April 2026

What we collect

Your email address is used to send a one-time login code via a third-party email delivery provider. It is never persistently stored in plaintext — only a cryptographic hash is retained for authentication purposes.

On successful login, a signed session token containing your email address is stored in your browser as an HTTP-only cookie and transmitted to our servers on each authenticated request. It is used solely to derive your data's cryptographic identifiers and is not logged or retained beyond the lifetime of the session.

What we store

Your intel — photos, notes, and location — is encrypted on your device before it is uploaded. openintel servers store the encrypted result. We have no means of reading your photos, notes, or precise location.

An approximate location (a ~5×5 km grid cell) is stored in plaintext as a retrieval index. Your precise coordinates remain encrypted.

Your password

Your encryption password is never transmitted to or stored by openintel. It exists only on your device and is used solely to derive your encryption key. If your password is lost, your encrypted data cannot be recovered by anyone — including us. There is no password reset mechanism by design.

Third parties

Encrypted intel metadata and images are stored with cloud infrastructure providers. Neither provider can read the content of your data.

Your email address is passed to a third-party email delivery provider for the sole purpose of sending your login code.

A third-party map tile provider serves the map imagery used in the rover application. When you use the map, your IP address and the tile coordinates you request are visible to that provider under their own privacy policy.

No tracking

openintel does not use analytics, advertising networks, or third-party tracking scripts of any kind. No data is sold or shared with any party beyond the infrastructure providers listed above.

Your rights

You may delete your intel at any time from within the rover application. To request deletion of all data, email openintel.admin@protonmail.com — you must send the request from the same email address you use with openintel so we can verify and action it.

Changes

If our data practices change materially, we will update this page and revise the date above. Continued use of the service after changes are posted constitutes acceptance.

← back