Privacy and Cookie Policy
Effective August 21, 2026
Open-Galileo uses limited personal information and browser storage to provide account, preference, and alert features. It does not use advertising or analytics cookies and does not sell or share personal information for cross-context behavioral advertising.
Browser storage
| Name | Type and purpose | Lifetime |
|---|---|---|
og_session | Strictly necessary, first-party, HttpOnly cookie that authenticates and protects an account session. | Rolling 15 minutes; expires after 15 minutes without activity. |
og_cookie_notice | Strictly necessary first-party cookie that remembers that this notice was acknowledged. | 180 days. |
open-galileo-locale | First-party local storage created after a language is selected so that preference can be restored. | Until cleared in browser settings. |
| Google Identity Services | Google may access its own storage when providing the user-requested Google sign-in flow. Open-Galileo receives the verified account identity, not the Google password or access token. | Controlled by Google and the user's Google/browser settings. |
Information processed
For signed-in users, Open-Galileo may store a verified email address, display name, Google account identifier, avatar URL, language preference, saved home location, saved objects, pass-alert settings, and an encrypted user-provided OpenAI API key. Public globe requests may be temporarily rate-limited using a one-way hash of the network address held only in function memory.
Third-party services
Open-Galileo uses Google Identity Services for sign-in and may call Mapillary, public aircraft and vessel sources, OpenAI, Resend, NASA, and other documented data providers from its servers to deliver requested features. Their own policies govern information they independently process.
Your choices
You can clear cookies and local storage in browser settings, sign out to revoke a server-backed session, avoid saving optional profile data, and use browser privacy signals such as Global Privacy Control. Open-Galileo does not sell or share personal information for advertising, so no sale/sharing opt-out is required for current functionality.
Questions and requests
Privacy questions, access requests, or deletion requests can be submitted through the Open-Galileo project issue tracker. Do not include passwords, API keys, or other secrets in a public issue.