Data Protection Notice
GeoAnomaly.com is committed to protecting your personal data in accordance with applicable international data protection laws including the EU General Data Protection Regulation (GDPR) and other relevant privacy legislation.
1. Data Controller
GeoAnomaly.com
United States
Email: dataprotection@geoanomaly.com
Support: support@geoanomaly.com
2. Data We Process
Account Data
- Full name and email address (provided at registration)
- Encrypted password — never stored in plain text (bcrypt)
- Account creation date and last login timestamp
- Language preference and interface settings
Usage Data
- Geographic coordinates you search or analyze
- Saved locations and associated notes
- Analysis results and detection history
- Feature usage patterns (anonymized)
Technical Data
- IP address (anonymized after 90 days)
- Browser type, version and operating system
- Device screen resolution, timezone and language
- Device fingerprint hash (anonymized — used for fraud prevention only)
- Canvas and WebGL rendering fingerprint (anonymized)
- Session timestamps and activity logs
Communication Data
- Email correspondence with our support team
- Feedback and reviews you voluntarily submit
3. Legal Basis for Processing
- Contract performance: Data necessary to deliver the service you requested
- Legitimate interests: Security, fraud prevention and service improvement
- Legal obligation: Compliance with applicable laws and regulations
- Consent: Marketing communications — withdrawable at any time
4. Data Sharing
⚠️ We never sell, rent, or trade your personal data to any third party.
- Infrastructure providers: Hosting services bound by data processing agreements
- Satellite imagery providers: Your coordinates are transmitted to satellite data APIs solely to retrieve imagery. These providers maintain their own privacy policies.
- Legal requirements: Only when required by applicable law or valid court order
- Business transfer: In the event of a merger or acquisition, with advance notice to you
5. Data Retention
- Active account data: Retained while your account is active
- Inactive accounts: Deleted after 24 months of inactivity
- Session logs: 90 days
- Security and fraud logs: 12 months
- Deleted accounts: Anonymized within 30 days of deletion request
- Financial records: As required by applicable law
6. Your Rights
Under applicable data protection law (including GDPR), you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interests
- Withdraw consent: For marketing communications at any time
To exercise your rights, contact: dataprotection@geoanomaly.com
We respond to all requests within 30 days. Identity verification may be required.
7. Security Measures
- All data transmitted via HTTPS/TLS encryption
- Passwords hashed using bcrypt (industry standard)
- JWT tokens with server-side session validation and 24-hour timeout
- Device fingerprinting for unauthorized access prevention
- Regular security audits and vulnerability assessments
- Access to personal data limited to authorized personnel only
8. Cookies & Tracking
- Essential cookies: Authentication tokens and session management (required for service)
- Functional cookies: Language preferences and UI settings
- No advertising cookies
- No third-party tracking — we do not use Google Analytics, Facebook Pixel or similar
9. International Data Transfers
Our servers are located in the European Union. Satellite imagery requests may involve providers in the United States and the EU. All international transfers are subject to appropriate safeguards including Standard Contractual Clauses where applicable.
10. Children's Privacy
GeoAnomaly is not directed at users under the age of 16. We do not knowingly collect personal data from minors. If you believe a child has registered, please contact us immediately at privacy@geoanomaly.com.
11. Changes to This Notice
We may update this Data Protection Notice periodically. Material changes will be communicated via email and a prominent notice on our website at least 14 days before taking effect.
12. Contact & Complaints
Data Protection: dataprotection@geoanomaly.com
General Support: support@geoanomaly.com
Privacy: privacy@geoanomaly.com
EU residents may also lodge a complaint with their national Data Protection Authority.