Open Orbit Privacy Policy

Effective September 25, 2026 · Version 2

1. Who we are. Aries Labs LLC, a Wyoming limited liability company, operates openorbit.ing. Contact: https://github.com/Aries-Labs-HQ — open an issue there; for a privacy request, open an issue asking only for a private channel, with no personal detail in it, and we will supply one.

2. What we collect and why. The Site has no accounts, no sign-up, no newsletter, no cookies, no analytics, no advertising, and no tracking. What exists:

• Wallet address. When you connect a wallet, your wallet extension gives the Site your public address in your browser. When you start a mint, the Site sends that address to our server so it can check the address's unspent outputs and mint count before the Site builds a transaction for your wallet to sign (pre-flight). Basis: performing the service you asked for.
• Acceptance record. When you connect, the Site records the version of the Terms you accepted, your wallet address, and the time, on our server. Basis: proving the contract. Retention: kept on our server with no automatic deletion.
• Server logs. Our web server keeps request logs (IP address, time, the full request address — which for some requests includes your wallet address or a transaction id — request headers including user agent, and response code). Retention: no fixed period — the server's system journal keeps at most 500 MB of all its logs and deletes the oldest first; at present that reaches back about four weeks. Basis: security and abuse prevention.
• Artist submission form. If you submit a collection, we keep what you enter (the collection name, the artist or studio, a contact, links, a planned supply if you give one, and a description of the work, with the time it arrived) to review it and to contact you. Collection submissions are stored on our server so we can review them. We do not record your IP address with a submission, and we do not share submissions with anyone. Retention: kept on our server with no automatic deletion.
• Browser storage. Your language choice and Terms acceptance are stored in your browser only, and you can clear them.

3. What leaves our server. To answer pre-flight and supply questions, our server queries third-party chain readers on its own behalf: the SUBFROST gateway (Subzero Research Inc.), Blockstream's public block explorer (blockstream.info), and Unisat's OpenAPI (open-api.unisat.io). The SUBFROST gateway receives your wallet address, transaction ids, and the outputs your coins sit at; Blockstream receives only the Receiving Address and a request for the current block height; Unisat receives the outputs (transaction id and output number) of the coins a mint would spend. For a mint signed with the SUBFROST extension, our server also sends the signed transaction to the SUBFROST gateway to broadcast it, and keeps a copy of it. Those queries carry your wallet address or transaction ids, not your IP. Each provider is an independent controller under its own policy. Through the Site, your browser contacts only openorbit.ing: every page, script, font, image, and data request goes to openorbit.ing and to no third party.

4. What is public forever. Bitcoin is a public ledger. Your address, your transactions, your pieces, and every payment to the Receiving Address are visible to anyone, permanently, and are outside our control. The leaderboard and supply counter are derived from that public data. We cannot delete anything from the blockchain, and a request to delete off-chain data does not affect it.

5. Who we share with. No one, except: the chain readers in Section 3 for the purpose stated; service providers that host the Site under confidentiality; and where required by law, legal process, or to protect rights and safety. We do not sell or share personal information for advertising, and we do not use it for profiling.

6. Your rights. Wherever you are, you may ask what off-chain information we hold about your address, ask us to correct or delete it, and object to processing, by contacting us. We will respond within 45 days. We do not discriminate for exercising rights. If you are in the EEA or UK you may also complain to your supervisory authority; the Site is not directed at the EEA or UK, and its language options do not target any country. We honor deletion for off-chain data we hold; we cannot honor it for the blockchain.

7. Children. The Site is for adults. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

8. Security. Our server never receives your keys, seed phrase, or signing capability. Connections use HTTPS. No method is perfect; keep your keys safe.

9. Do Not Track. The Site sets no trackers, so there is nothing for a Do Not Track signal to change.

10. Changes. We will publish revisions here with a new effective date.