Privacy Statement

What you make in the Observatory is stored on your computer. There is no account, nothing is kept in the cloud, and nothing is synced to us. We can't see or reach any of it.

• Your files. The Observatory reads only the files and folders you choose to link, and only to read them. It never changes, moves or deletes them. It saves files of its own, such as a backup, only when you ask, and only where you choose.
• Search. Any search index the Observatory makes from your linked files stays on your computer.
• Your license is stored on your computer, and holds no name, email address or device information.
• Backups. A backup holds what you made in the Observatory, including which files you linked, but not the files themselves. It is saved where you choose, and it isn't encrypted, so keep it somewhere private.

The Observatory goes online for one thing. When it opens, it checks once whether an update is ready. That check goes to our website, which is hosted by Netlify. It shows Netlify your internet address, which edition you have, and the usual details any app sends when it asks for a file. Beyond that, it carries nothing about you or your work. An update downloads only when you choose to bring it in, and Netlify also receives each update you download.

• There is no advertising in the Observatory, and no other company's tracking is built into it.
• The Observatory shows its pages through a part of Windows made by Microsoft. If your computer doesn't have that part, the installer downloads it from Microsoft. What it sends to Microsoft is covered by Microsoft's own privacy statement, not this one.

Today the Observatory sends us nothing about how you use it, and it doesn't check in online about your license. We plan to add both. Before any version of the Observatory does either, we will publish a new version of this statement saying what it sends, who receives it, how long it is kept and what choice you have, and we will tell you.

Gumroad sells our products and runs the checkout. Gumroad and its payment processors handle your card details, under Gumroad's own privacy policy. We never see your card number.

When you buy from us, or get something free from us through Gumroad, Gumroad shares these details with us: your first name and email address; what you got, how many, and what you paid; whether you chose to hear from us; the page or link that brought you to us; and when your receipt was sent and whether it was opened.

We use them only to deliver and renew your license, answer you, send you notices about your subscription or this statement, understand our sales in totals, keep the records a business must keep, and, only if you said yes, send you news or offers.

• When you write to us, we receive your message and your email address. Our email is provided by Google. Claude, an AI assistant made by Anthropic, helps us read your message and draft a reply, so your message passes through Anthropic's service. Every reply is read and sent by a person.
• Our sales totals. Claude also prepares reports on our sales, for our own use. To do that, it reads our Gumroad sales records, which include your first name and email address, through a connector service called Composio. The connection can only read these records, not change them. Composio may keep a copy of what passes through it for up to one year, under its own privacy policy. Our reports keep totals, and don't copy your name or email address into our own records.
• Notices from us. We email you about anything that touches your money or your license, such as a price change, or a change to our license or to this statement. These come whether or not you chose to hear news from us.
• News and offers. We don't send these yet. When we do, they will go only to people who said yes, and every one will tell you how to stop them.

Our website, sanctumdesignsco.com, is hosted by Netlify, which receives the internet address of each visit. It has no advertising, and our free Star Map downloads straight from the website without asking for anything. Here is what else it does:

• Counting visits. We use Cloudflare Web Analytics to count visits to our website. It doesn't use cookies, and it doesn't follow you to other websites. It records which pages are visited, the page or link that brought you there, the kind of device, browser and operating system, and roughly which country the visit came from. It receives your internet address, as any website service does, but doesn't use it to follow you. We see these only as totals. Cloudflare keeps the detailed records for 7 days, and after that only totals, which we can see for six months.
• Signing up for news. If you sign up for our email list on our website, we receive your email address, and nothing else is asked. Buttondown keeps it for us, along with your internet address and the page the signup came from, and sends our emails for us. Buttondown sends one email first, asking you to confirm, and you are not on the list until you do. We only email people who signed up themselves. Every email tells you how to stop them, and when you unsubscribe, you come off the list. You can also ask Buttondown or us to delete your address.

We share personal information only with these, and only for these reasons:

• Gumroad, which sells our products and takes payment.
• Google, which provides our email.
• Anthropic, which makes Claude, the AI assistant that helps us with email and sales reports.
• Composio, the connector service through which Claude reads our Gumroad sales records.
• Netlify, which hosts our website and our update files, and so sees the internet address of each visit and update check.
• Cloudflare, which counts visits to our website.
• Buttondown, which keeps our email list and sends our emails.
• Anyone the law requires, such as in answer to a court order.

Each of these handles information under its own privacy policy. We don't sell or rent your personal information, and we don't upload our buyers' details to advertising platforms. If that ever changes, this statement will say so first, and we will tell you.

• Your work is stored on your computer, and the Observatory adds no encryption of its own. Anyone who can sign in to your computer as you, or who has your computer, may be able to read it. A password on your Windows account helps protect it.
• Backups aren't encrypted. Keep them somewhere private.
• Updates come over a secure connection, and the Observatory installs only updates signed by us.
• Your card details are handled by Gumroad and its payment processors, never by us.
• What we receive, such as your first name, your email address and the messages you send us, is kept in our Gumroad, Google and Buttondown accounts, which are protected by their own sign-in.

Information about your purchase is kept in our Gumroad account, and your messages in our email. We don't keep lists of buyers in any other records of our own. We keep it for as long as we need it to serve you, and as long as a business is required to keep its records. If you're on our email list, we keep your address until you unsubscribe or ask us to delete it. Anything Composio keeps, Composio deletes within a year, under its own policy.

• News emails come only if you said yes, and you can stop them at any time from the link in any of them.
• Seeing, correcting or deleting. Write to us, and we will tell you what we hold about you, correct it, or delete what we are not required to keep. Gumroad keeps its own records of your purchase, under its own policy.
• What's on your computer is yours to keep or delete.
• More rights. If the law where you live gives you more rights over your information, those rights are yours. Write to us to use them.

Some browsers can send a "Do Not Track" signal. Neither the Observatory nor our website follows you across other websites or apps, so there is nothing for that signal to change.

We have not built any other company's tracking into the Observatory, and we do not allow other companies to collect information through it about what you do over time or across other websites. The part of Windows it uses, made by Microsoft, is described above.

The Observatory is not made for children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has given us information, write to us and we will delete it.

If a change affects information you have already given us, or what the Observatory sends, we will tell you by email before it takes effect. Every other change is published here first, with a new effective date. Earlier versions are kept, and we will send you one if you ask.