This Privacy Policy describes how Orbital Momentum AS ("we", "us", or "our") handles information when you use the SpaceX Tracker iOS application ("the app").
We are based in Norway and operate within the European Economic Area (EEA). The General Data Protection Regulation (GDPR) applies to our processing. If you are located in California, the California Consumer Privacy Act (CCPA) also applies — your rights under CCPA are described in Section 10.
We collect only what is necessary to operate the app and deliver push notifications. We do not sell personal data. We do not use advertising identifiers (IDFA).
The app processes the following categories of information:
| Category | Examples | Collected by | Leaves device? |
|---|---|---|---|
| Analytics events | App open, screen view, notification interaction | Firebase Analytics | Yes — Google servers |
| Device identifiers | IDFV (Identifier for Vendors) | Firebase Analytics | Yes — Google servers |
| Device properties | Country (IP-derived), language, app version, device model | Firebase Analytics | Yes — Google servers |
| FCM registration token | Device push token (no user identity) | Firebase Cloud Messaging | Yes — Google/Firebase servers |
| Purchase receipts | StoreKit 2 transaction receipts (subscription status) | Apple StoreKit 2 | Handled by Apple; subscription status cached locally only |
| Cached app content | News articles, merch listings, launch schedules, preferences | App (local only) | No — stored on device only |
The sections below describe each category in detail.
The app uses Firebase Analytics (Google LLC) to understand how the app is used and to improve stability and features. Firebase Analytics collects data automatically when the app runs.
first_open — app launched for the first time after installapp_update — app updated to a new versionapp_remove — app uninstalled (reported before removal)session_start — a new usage session beginsscreen_view — user navigates to a screennotification_receive — a push notification is deliverednotification_foreground — a push notification is received while the app is opennotification_open — user taps a push notification
Firebase Analytics uses the IDFV (Identifier for Vendors),
a device-level identifier assigned by iOS. The IDFV is shared across apps from
the same developer (Orbital Momentum AS) and resets when all apps from that developer are
uninstalled. The app does not use the IDFA (Identifier for Advertisers)
and advertising is disabled in the Firebase configuration (IS_ADS_ENABLED = false).
We process analytics data under Legitimate Interests (Art. 6(1)(f) GDPR) to understand aggregate app usage and improve the user experience. We limit collection to the events listed above and have disabled advertising features.
You can opt out of Firebase Analytics data collection at any time by going to iOS Settings → Privacy & Security → Analytics & Improvements and turning off Share iPhone Analytics. Alternatively, contact us at the email in Section 14 and we will provide guidance.
If you allow notifications, the app registers with Firebase Cloud Messaging (FCM) to receive push notifications about launch updates, schedule changes, and mission outcomes.
all_users. All subscribers receive the same notifications.
There are no user-specific or identifying topics.
Notifications are delivered through Apple Push Notification service (APNs). Apple acts as a data processor for this delivery. See Section 8 for Apple's privacy policy link.
The FCM token is automatically rotated by Firebase periodically. When you delete the app, the token is effectively deregistered and can no longer receive notifications.
Push notification registration is based on your consent (Art. 6(1)(a) GDPR) given when iOS prompts you to allow notifications. You can withdraw consent at any time in iOS Settings → Notifications → SpaceX Tracker.
Subscriptions and one-time purchases are processed entirely by Apple via StoreKit 2. We do not collect, see, or store your payment card details, billing address, or Apple ID.
The app receives a StoreKit 2 transaction receipt to verify subscription status.
This status (active / inactive) is cached locally on your device in
UserDefaults. It is not transmitted to our servers.
All purchase-related inquiries (refunds, billing issues) must be directed to Apple.
The app caches the following data locally on your device to provide a fast, offline-capable experience:
None of this locally stored data is transmitted to us or any third party. It is deleted when you delete the app.
The app does not collect or request access to:
CLLocationManager usage)The app integrates with the following third-party services. Each has its own privacy policy linked below.
| Service | Purpose | Data shared | Privacy policy |
|---|---|---|---|
| Firebase Analytics & FCM (Google LLC) | Usage analytics, push notifications | Events, IDFV, device properties, FCM token | policies.google.com/privacy |
| Apple (StoreKit 2, APNs) | In-app purchases, push delivery | Transaction receipts (processed by Apple); push delivery via APNs | apple.com/legal/privacy |
| Launch Library 2 / The Space Devs | Launch schedule and mission data | Standard HTTP requests (IP address may be logged by the API server) | thespacedevs.com/llapi |
| Open-Meteo | Weather data at launch sites | Standard HTTP requests (no account, no personal data sent) | open-meteo.com/en/terms |
| Etsy | Merch listings (opened in browser) | When you tap a merch item, Etsy's website opens in your browser; Etsy's own privacy policy applies from that point | etsy.com/legal/privacy |
We have not entered into data-sharing arrangements with these third parties beyond what is necessary for the stated purposes. Google LLC and Apple Inc. act as data processors for Firebase/FCM and StoreKit/APNs respectively.
| Data | Retention period | Notes |
|---|---|---|
| Firebase Analytics events & user properties | 14 months | Google's default retention setting; data is aggregated and anonymised after this period |
| FCM registration token | Until app is deleted or token is rotated by Firebase | Deleting the app effectively deregisters the token |
| Local cache (articles, launches, preferences) | Until app is deleted | Stored only on device; not held by us |
| Subscription status | Until app is deleted | Stored only in UserDefaults on device |
Under the General Data Protection Regulation you have the right to:
You also have the right to lodge a complaint with your national data protection authority. In Norway, this is the Datatilsynet.
California residents have the right to:
For data held by us: contact us at the email address in Section 14. We will respond within 30 days.
For data held by Google (Firebase Analytics/FCM): use Google's Data & Privacy tools or contact Google directly.
The most effective way to remove locally stored data and your FCM token is to delete the app from your device. Analytics data held by Google is anonymised in aggregate after the 14-month retention period.
Go to iOS Settings → Privacy & Security → Analytics & Improvements and turn off Share iPhone Analytics. This prevents Firebase Analytics from collecting events on your device.
SpaceX Tracker is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information through the app, please contact us at the email in Section 14 and we will delete it promptly.
We may update this Privacy Policy from time to time. When we do:
We encourage you to review this page periodically. The URL for this policy will not change.
SpaceX Tracker is an unofficial, fan-made application. It is not affiliated with, endorsed by, or sponsored by Space Exploration Technologies Corp. in any way.
The following are registered trademarks of Space Exploration Technologies Corp.:
All vehicle imagery and mission data displayed in the app are sourced from the publicly available Launch Library 2 API (The Space Devs) and SpaceX press releases. Use of these names and data is for informational, fan, and educational purposes only.
For privacy-related questions, requests, or complaints, please contact the data controller:
We aim to respond to all privacy enquiries within 30 days.