Privacy policy

Last updated: 21 October 2026

English

Who we are

This policy covers KAYSTRO Feedback, the feedback service for SeeCapture by KAYSTRO, an independent project by Kevin Mackaay. Contact: info@kaystro.com.

Voluntary feedback and data collected

Sending feedback is voluntary. A report contains a report type, subject and feedback text. You may include your name and email address, app version, telescope model, firmware version and technical or app diagnostic information, such as relevant log excerpts. Name, email and diagnostics are optional. We also store a report reference, language, submission time and delivery status. Do not include passwords, access tokens or other sensitive information. The website form accepts one optional PNG, JPG/JPEG, PDF, TXT or LOG attachment, up to 5 MiB. Attachments are sent by email and are not stored in the feedback database; a failed delivery cannot recover the attachment from the database.

How we use your information

We use reports to provide support, reply when you supply an email address, investigate problems and improve SeeCapture. We do not sell personal information or share it for advertising, and we do not use feedback data for targeted advertising.

Storage, service providers and security

Feedback reports and the information required to process them are stored in a Cloudflare D1 database. Cloudflare hosts the website and provides the Turnstile spam check; it may process technical connection and browser information for security and spam prevention. Feedback email is sent through Resend. Information included in the email is therefore processed by Resend for email delivery. Optional attachments are sent through Resend but are not stored in the feedback database. Access is limited to handling and maintaining the service, using HTTPS and server-side credentials. Service providers may process data according to their applicable terms and safeguards.

Email delivery

KAYSTRO uses Resend as a transactional email provider for feedback messages. When you submit feedback through the website, the information needed to deliver that message, including any optional attachment, is sent to Resend. Resend is used only to deliver these service-related emails; visitors do not need to create a Resend account or sign in to an external email service.

Retention and deletion

We retain reports and related email correspondence only as long as needed for support, investigation and improvement, or applicable legal obligations. The supplied service has no automatic deletion schedule; deletion must be performed by KAYSTRO in both the database and relevant email records. To request access, correction or deletion, email info@kaystro.com, preferably with your report reference or the email address used. We may ask for enough information to verify that the request concerns your data. If data must be retained for a legal obligation, we will explain the reason.

Website preferences and download statistics

Your language preference is saved locally in your browser. Installer files are delivered through GitHub, which receives the related download requests. Cloudflare hosts the website and may process technical connection information and logs.

When a download is started through the KAYSTRO website, KAYSTRO records limited download statistics such as the SeeCapture version, download source, country and time. To estimate repeated versus unique downloads without storing the raw IP address in the download statistics database, the client IP address is used only during the request to create a one-way daily identifier. The raw IP address is not stored by KAYSTRO in the download statistics database. Because the identifier changes each UTC calendar day, it is not intended to create a long-term visitor profile. These statistics are used to understand SeeCapture download activity and improve the project. These website functions are separate from the optional feedback you submit.

Contact and changes

Questions about privacy or a deletion request can be sent to info@kaystro.com. Updates to this policy will appear on this page with a revised date.

KAYSTRO Community

This notice also covers the KAYSTRO Community and tester page.

Community account and sign-in

For your account we store your email address, username, Community name, optional profile fields, security role and account dates. Verification codes are delivered through Resend. Login codes and session tokens are stored as hashes. The necessary community_session cookie keeps you signed in for up to 90 days. Afterwards, sign in again with the same email address; your account, badges and settings are preserved. Technical limits on sign-in attempts help prevent abuse.

Public contributions and profiles

Forum questions and replies are public. Approved Gallery and Showcase photos, descriptions, comments and the displayed author name can be viewed without an account. Your public profile appears only when you enable it and contains the stated public fields and badges. Your email address and private profile fields are not published through that profile. Disabling your profile does not remove previous public contributions. Do not share private information in images, text or files.

Roadmap, previews and storage

Roadmap votes are linked to your account to prevent duplicate votes; visitors see totals. Preview downloads require sign-in. Preview feedback is visible to its author and Community administrators. Community data is stored in Cloudflare D1; photos and preview files in Cloudflare R2. Cloudflare provides hosting and Turnstile; Resend delivers verification emails. A withdrawn preview is no longer available to members but is removed from storage only through a separate deletion action.

Retention and requests

An expired login does not delete your account or contributions. No automatic deletion schedule is currently configured for Community account data and contributions. For access, correction or deletion, email info@kaystro.com and include your account email address or username. We check that the request concerns your data. Deleting an account and related contributions or files requires separate handling; disabling your public profile is not a deletion request.

Legal bases

We process the data necessary to create and use your requested account, sign in, vote and publish contributions to provide the service you choose (Article 6(1)(b) GDPR). Publication of your optional public profile relies on your consent (point a); withdraw it by disabling the profile or emailing us. For security, abuse prevention, support, troubleshooting and limited download statistics, we rely on our legitimate interest (point f) in maintaining a reliable, useful service. We limit data and access, do not create advertising profiles and consider your privacy. You may object to processing on this basis. A legal obligation may require us to retain certain data (point c).

Retention criteria

We retain account data while you keep the account and the data is needed for your chosen features. An expired login does not close the account. When you request closure or deletion, we also assess related contributions, votes, files and any necessary exceptions. Public contributions remain available while used for the relevant discussion or Gallery, unless deletion is needed or requested. Hiding your profile alone does not delete those contributions. We retain feedback and correspondence while handling the question or issue, and afterwards only while its contents are needed to resolve the issue or investigate recurrence. Expired authentication records cannot be used to sign in. Cleanup is not automated; during manual cleanup we assess whether technical records are still necessary for a current security or abuse investigation. The same necessity criterion applies to download statistics. Backups may contain older copies; completed deletion requests must be respected again after restoration.

Your privacy rights

Email info@kaystro.com to request access, a copy, correction, erasure or restriction of your data. Where applicable, you may request portability, object to processing based on legitimate interests and withdraw consent. Withdrawal does not affect the lawfulness of earlier processing. We check only what is needed to confirm your identity and normally respond within one month. Complex requests may require up to two additional months; we inform you within the first month. You may complain to the Dutch Autoriteit Persoonsgegevens or your EU/EEA supervisory authority. We do not make solely automated decisions that have legal or similarly significant effects on you.

Providers and processing outside Europe

Cloudflare, Resend and GitHub may process data outside the EEA. Resend also processes email data in the United States. International transfers are subject to the applicable processing agreements and safeguards, such as standard contractual clauses or an applicable adequacy decision. Ask us for information about these safeguards. The website does not guarantee exclusively European storage.

Required and optional information

An email address and Community name are needed to use an account; without them you cannot use member features. Additional profile fields and a public profile are optional. Feedback can be submitted without a name or email address, but without contact details we cannot reply directly. The session cookie is necessary to stay signed in; your language preference is stored in your browser. We do not use these features for advertising.

Cloudflare · Resend DPA · GitHub Privacy · Autoriteit Persoonsgegevens

KAYSTRO Quick Polls

Participation is optional; you can answer later. When voting or refreshing results, SeeCapture sends the poll ID, answer ID and a random key for that poll and installation to KAYSTRO over HTTPS. No name, email, licence key, hardware ID or telescope data is sent. The server stores a derived HMAC key and your first choice so repeated requests do not count twice. This protects per installation, not per person. The key and last received results remain locally until you clear app data.

The data is used to run the selected poll and limit abuse. For request limits, the server temporarily transforms the connection address into a per-minute HMAC counter; it contains no readable IP address and is not linked to your vote. Counters expire within two minutes and are removed by daily cleanup. Vote records are removed at the first daily cleanup 90 days after closing; only aggregate totals and the poll definition remain. Cloudflare also processes normal connection data under its infrastructure policies. Contact info@kaystro.com with privacy questions; a name or email address cannot be used to find an anonymous vote.