Privacy policy
Slash Orbit Gallery · updated 26 September 2026
Slash Orbit Gallery is a private, invite-only drive that one person — the admin — runs for their family and friends. It has no ads, no analytics and no tracking, and nothing about you is sold or shared for marketing.
What is collected
- When you sign in with Google or GitHub: your name, email address and profile picture, which identify your account and are checked against the invite list. The sign-in tokens they return are stored with your account and used for nothing else. The app doesn’t ask for your Google Drive, contacts or anything beyond this.
- What you upload: your files and the details that go with them — names, folders, tags, stars, shares and when you last opened a file.
- Cookies: one keeps you signed in for up to 30 days, and the vault adds a second, short-lived one. There are no other cookies.
Where it is kept
- Files: Amazon S3 in Mumbai, India, encrypted at rest. Thumbnails are made on your device.
- Account and file details: a Neon Postgres database in Singapore, with a nightly backup kept for 30 days.
- The app itself runs on Vercel.
- If you turn on offline access, copies stay in that browser on that device until you remove them in Settings. Vault items are never kept offline.
Who can see it
- Your files: you, and the people you share them with.
- A file you create a link for: anyone who has that link, without signing in, until it expires or you turn it off. They see the file, its name and your name. Vault files never get links.
- The admin: your name, email, role and how much storage you use. As the operator of the servers, the admin also has technical access to the stored data.
- No one else. Your information is not sold, rented or passed on.
Google user data
Information received from Google is used only to sign you in and to show your name and picture in the app, and it is not transferred to anyone. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Deleting your data
- Items you delete go to Trash and are removed for good after 30 days, or straight away with “Delete forever”.
- To delete your account and everything in it, ask the admin. Your files, folders, shares and sign-in details are then deleted; the database backups age out within 30 days.
Questions
Ask the admin — the person who invited you.