GL Orbit

A scrapbook for series lovers

Login Register

Privacy at GL-Orbit

Privacy policy

This page explains what GL-Orbit collects, uses, shares, and protects when you browse the site, create an account, or use member features.

In short

We use data to provide the features you choose, secure your account, and manage the community. Account details, chats, streaming subscriptions, and personal lists are not public. Your profile and content posted to Orbit Halo may be visible as part of the community.

Data we collect

The data we collect depends on the features you use. You can browse public pages without creating an account.

Account and profile
Username, email, display name, profile and cover images, language preference, and a hashed form of your password.
Personal activity
Favorites, watched history, notifications, saved subscriptions, plans, billing periods, payments, and budgets.
Orbit Halo
Moments, comments, images, links, likes, bookmarks, reports, and connections between posts and series, artists, or ships.
AI Chat and AI providers
Questions, answers, conversation history, relevant context, and any provider settings or credentials you add to connect an AI service.
Device and usage data
Session and locale cookies, browser, operating system, device type, masked IP, approximate location, activity times, push endpoint, and page-performance data.

How we use data

GL-Orbit uses data to operate the service and honor the settings you choose.

  • Create and maintain accounts, authenticate users, remember language, and maintain sessions.
  • Save favorites, watched history, subscriptions, notifications, and personal settings.
  • Display and moderate Orbit Halo, review reports, prevent spam, and enforce community rules.
  • Send questions and necessary context to the AI provider you select so it can generate a response.
  • Prevent abuse, troubleshoot problems, and measure the service's overall performance.

Cookies and browser storage

We use cookies and browser storage to operate the site and remember your choices.

  • The session cookie signs you in for up to 30 days and uses httpOnly and sameSite=lax settings.
  • The locale cookie remembers your language for up to one year. Share Target data is temporary when importing content into Orbit Halo.
  • Local storage remembers your theme, shape, preferred currency, and whether you dismissed the Push Notification prompt.
  • The PWA may cache app files in your browser. You can clear site data in browser settings, but doing so may sign you out and reset preferences.

When data is shared

We share data only as needed to provide the service, maintain safety, and meet legal requirements.

  • Infrastructure providers may process data for us, including hosting, databases, image storage, Push Notification delivery, and performance measurement.
  • The AI provider you select receives the message and context needed for a response under that provider's own policy.
  • When you load an embed or external image, or open a link to another platform, that platform may receive technical data from your browser.
  • We may disclose data when required to comply with law, prevent harm, investigate misuse, or protect users' and the service's rights.

Public and private information

Visible to others
Your username, display name, profile and cover images, and content or interactions you publish in Orbit Halo may be visible to others. Avoid posting sensitive information you do not want to disclose.
Kept private
Your email, password hash, favorites, watched history, subscription, payment and budget data, notifications, AI Chat history, and AI provider credentials do not appear on your public profile.

How long we keep data

  • We keep account and member-feature data while the account is active or until you remove data through an available control.
  • Sessions remain valid for up to 30 days and can be revoked from Security. AI Chat history has a 30-day expiry from its latest activity and can be deleted from Chat.
  • Deleted data may remain temporarily in backups, security logs, reports, or moderation records where needed for recovery, abuse prevention, or legal obligations.

How we protect data

We apply safeguards appropriate to the data, but no online system can guarantee complete security.

  • Passwords are hashed, and the database stores a hash of each session token rather than the raw token.
  • Member routes scope resources to their owner, while administration tools enforce the ADMIN role separately.
  • Rate limits, URL checks, and upload controls help reduce misuse.

Your rights and controls

You can update your profile and password, revoke device sessions, disable Push Notifications, and delete supported chats, Moments, comments, and subscription records from their feature pages. Where applicable law gives you additional rights—such as access, correction, deletion, or objection—those rights remain subject to its conditions.

Manage profile Review sessions Configure AI providers Manage chat history

GL-Orbit does not yet have a verified public privacy email. We will update this page when an official request channel is available rather than publish contact details that do not work.

Changes to this policy

We may update this policy when features, service providers, or relevant requirements change. The date above shows the latest revision, and we may provide an in-app notice when a change materially affects users.