Privacy Policy

Last updated: March 2026

What we collect

Your email address is used solely to send a one-time login code. It is never stored in plaintext on our servers — only a cryptographic hash is retained for authentication purposes.

A session cookie (auth_token) is set on successful login. It expires after 24 hours, is HTTP-only, and cannot be read by JavaScript or browser extensions.

What we store

Your intel — photos, notes, and location — is encrypted on your device before it is uploaded. openintel servers store only the encrypted result. We have no means of reading your photos, notes, or precise location.

An approximate location (a ~5×5 km grid cell) is stored in plaintext as a retrieval index. Your precise coordinates remain encrypted at all times. Timestamps are obfuscated server-side; the real value exists only within your encrypted payload.

Your password

Your encryption password is never transmitted to or stored by openintel. It exists only on your device and is used solely to derive your encryption key. If your password is lost, your encrypted data cannot be recovered by anyone — including us. There is no password reset mechanism by design.

Third parties

Encrypted intel metadata and images are stored with cloud infrastructure providers. Neither provider can read the content of your data.

A third-party map tile provider serves the map imagery used in the rover application. When you use the map, your IP address and the tile coordinates you request are visible to that provider under their own privacy policy.

No tracking

openintel does not use analytics, advertising networks, or third-party tracking scripts of any kind. No data is sold or shared with any party beyond the infrastructure providers listed above.

Your rights

You may delete your intel at any time from within the rover application. To request deletion of all data associated with your account, email admin@openintel.to — you must send the request from the same email address registered to your account so we can verify and action it.

Changes

If our data practices change materially, we will update this page and revise the date above. Continued use of the service after changes are posted constitutes acceptance.

← back