Privacy
METEOR stores as little as it can.
What is stored
- When you save a meteorite: your public wallet address, the row it drew, and the card style and line you choose. This is public, on your specimen's page and in the API.
- When you sign in: a one-time sign-in nonce (deleted after a day) and a session cookie in your browser that holds your address, signed by the server. No password, no email.
- The newest fireballs from NASA/JPL CNEOS, cached for three hours.
- Rate-limit counters keyed by IP address, kept for about an hour.
What is not
No analytics profile, no advertising, no selling of data. Cloudflare, which hosts the site, may collect aggregate traffic statistics. Your browser remembers that you have seen the intro this session.
Third parties
Fonts load from Google Fonts. Photos, when a meteorite has one, load from Wikimedia (upload.wikimedia.org) without sending a referrer. The meteorite record and the map ship with the site; fireballs are read by our server, so your browser doesn't contact NASA directly.