Privacy Policy

Last updated: July 26, 2026

This Privacy Policy explains how AlephDot SRL ("ZenRockets", "we", "us") collects, uses, and protects information when you use ZenRockets. It also describes your privacy rights and how to exercise them.

Who We Are

ZenRockets is operated by AlephDot SRL, a company registered in Romania. For any privacy question or request, contact [email protected]. For purposes of the GDPR, AlephDot SRL is the data controller for the information described here.

Information We Collect

We collect information you provide or generate while using ZenRockets:

  • Account information, such as your email address, name, avatar, email-verification status, and account creation date;
  • Authentication information, such as the profile details and tokens we receive when you sign in with Google or GitHub, or the email address you use for magic-link sign-in;
  • Session and security information, such as session tokens, expiration dates, IP address, user agent, and rate-limit events;
  • User-created content, including rocket designs, motor designs, simulation settings and outputs, imported flight data, descriptions, and your public/private visibility choices;
  • Billing metadata, such as Polar subscription identifiers, plan, status, trial and renewal dates, and billing-portal events (we do not collect or store your card or payment details; Polar handles those as merchant of record);
  • Legal acknowledgement information, including the policy version and acceptance time;
  • Communications, such as magic-link, welcome, Premium, and support emails; and
  • Technical logs used to operate, debug, secure, and improve the Service.

Launch and Forecast Data

When you use live forecast functionality, ZenRockets sends launch latitude, longitude, forecast date, the selected weather model, and related request details to Windy to fetch forecast data. We store the resolved forecast layers with your simulation settings so that reruns stay consistent; this data is deleted when you delete the associated content or your account.

How We Use Information and Our Legal Bases

We use your information for the purposes below. Where the GDPR applies, our legal basis is shown in brackets:

  • create accounts, authenticate you, and maintain sessions [performance of a contract];
  • save, load, simulate, visualize, and share your content [performance of a contract];
  • process Premium subscriptions and billing through Polar [performance of a contract; legal obligation for tax and accounting records];
  • send magic links, service emails, and support replies [performance of a contract];
  • fetch the forecast data you request [performance of a contract];
  • enforce rate limits, prevent abuse and fraud, and keep the Service secure [legitimate interests; legal obligation];
  • debug errors, maintain reliability, and improve ZenRockets [legitimate interests];
  • understand how product features are used through privacy-preserving, cookieless product analytics [legitimate interests];
  • measure which marketing campaigns lead to sign-ups: if you arrive through an ad or campaign link, the click identifier and campaign parameters from that link may be recorded with your sign-up, and ad-click identifiers may be shared with the advertising platform the click came from (such as Google Ads) to confirm the sign-up — without any advertising cookies, scripts, or storage on your device [legitimate interests];
  • verify and document acceptance of our age restriction, educational-use limitation, Terms, and Privacy Policy [performance of a contract; legitimate interests]; and
  • comply with legal obligations and enforce our agreements [legal obligation; legitimate interests].

We do not use your information to show you advertising, and we do not sell it. Campaign measurement is limited to confirming sign-up conversions as described above.

Cookies and Local Storage

ZenRockets uses only essential cookies and similar storage for authentication, session continuity, and security, and uses your browser's local storage to keep drafts and preferences on your device. We use PostHog (hosted in the EU) for product analytics in a cookieless configuration: it sets no cookies, stores nothing on your device, does not record your sessions, and is not used to build advertising profiles; it may forward sign-up conversion confirmations to advertising platforms as described above. Because no non-essential cookies or device storage are used, no cookie-consent banner is required.

Public Content

Content you mark as public can be viewed by other users and visitors of ZenRockets. This may include names, descriptions, rocket or motor design data, simulation outputs, and imported flight data attached to the public item. Do not mark content public if it contains information you do not want shared.

How We Share Information

We share information with service providers and transaction partners only as needed to run ZenRockets, including Google and GitHub for authentication, Polar as our merchant of record for billing, Resend for email delivery, Windy for forecast data, PostHog for EU-hosted product analytics, advertising platforms (such as Google Ads) that receive only the ad-click identifier of a completed sign-up for conversion measurement, and our hosting, database, logging, and infrastructure providers. Polar may process buyer, payment, tax, and fraud-prevention information under its own terms and privacy notices. We may also disclose information if required by law, to protect rights, safety, and security, or to address fraud or abuse. We do not sell your personal information and do not share it for cross-context behavioral advertising.

International Transfers

ZenRockets may process and store information in countries other than where you live, including the United States. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

Data Retention and Deletion

We keep information for as long as needed to provide ZenRockets, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Sessions and verification tokens expire automatically and are routinely purged; technical logs are retained for a limited period.

You can delete your account from the account page. Deletion removes your ZenRockets account and associated app data, including legal acknowledgement information, from active ZenRockets systems, subject to backups and legal obligations. Polar, as our merchant of record, may retain invoices, charges, and related billing records where required for accounting, tax, fraud-prevention, or legal reasons.

Your Rights

Depending on where you live, you may have some or all of the following rights:

  • EEA / UK (GDPR): access, rectification, erasure, restriction, objection, data portability, the right to withdraw consent at any time, and the right to lodge a complaint with your local data-protection supervisory authority.
  • California and other US states: where applicable law provides them, the rights to know, delete, and correct your personal information, and to opt out of its sale or sharing. In practice we honor these requests for everyone: we do not sell or share personal information, do not use sensitive personal information for purposes that require an opt-out, and will not discriminate against you for exercising your rights.

To make a request, contact [email protected]. We may need to verify your identity, and we will respond within the timeframes required by applicable law.

Security

We use technical and organizational measures to protect your information, including encryption in transit, access controls, and hashing of sensitive tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

ZenRockets is not intended for or directed to anyone under 16. We do not knowingly allow anyone under 16 to create accounts or use the interactive Service. If we learn that a child under 16 has provided personal information or is using the Service, we will suspend the account and delete the information as appropriate. If you believe a child under 16 is using ZenRockets, contact us at [email protected].

Changes

We may update this Privacy Policy from time to time. For material changes we will take reasonable steps to notify you. Continued use of ZenRockets after an update means you acknowledge the updated policy.

Related Terms

Use of ZenRockets is also governed by our Terms of Use.